The scenario is a small DVD company with 10 employees. The owner has no knowledg
ID: 3622639 • Letter: T
Question
The scenario is a small DVD company with 10 employees. The owner has no knowledge of information technology management, he depend totally on one employee. All employees have permission to use the internet when business is slow. One employee spends unlimited hours on the computer away from everyone else. Customers are complaining that the computers are to slow, but the one employee who is the only employee(who is self taught) with only basic knowledge of computer skills , tells the owner this is not a problem. This company does not have an antivirus system activated on their computers.What would this owner need to include in a written "Policy for computer security" what are the weakness and consequences .If the weakness are not addressed in this small company.Explanation / Answer
In a written policy for computer security, the owner needs to include various issues like 1. The purpose of the Internet usage in their organization 2. The extent to which internet connection is to be used 3. The time limit to which an employee must access the computer 4. Rights and responsibilities of the employees 5. What the employees are allowed to do and what they are not supposed to do. 6. Consequences if the rules are violated Weaknesses: 1. The owner has no knowledge of information technology. 2. The owner depending completely on one employee. 3. No limit on the usage of internet 4. No other employees except one, having knowledge of computer skills 5. No antivirus activated on the computers. Consequences: 1. Disclosure of sensitive information. Theft of important information is possible. 2. The computer systems may be crashed due to virus and data may be lost. 3. The employees may misuse the system and internet for some anti-social purposes or for their personal benefits. 4. Unauthorised access. The employee with computer knowledge may hack the other employees’ systems.