Reference no: EM1347793

Q1) Write a statement for security policy for the following:

Let LAN for small 100-person business, Pixel Inc. Business occupies one floor in office building. Everybody has a computer on his or her desk, and there are servers for the Web, file & print sharing, email, database, and a small 3D render farm, a rack of 20 dual processor Xeon servers running Red Hat Linux that generates the actual high-resolution video animations that Pixel produces for its clients. The desktop systems consist of Apple Mac Pro desktops running Mac OS X Leopard for the creative staff, and Windows Vista PC computers for general use. The servers are Windows Server 2003 running Microsoft Exchange, Web server, and file & print service. The network is gigabit Ethernet and the network hardware is a mixture from Cisco and Hewlett-Packard.
Employees, business partners, and clients may visit Pixel's office with laptop computers in order to collaborate on projects. The laptops will obtain their IP configuration from the DHCP server at Pixel.
Pixel has 10 megabit/second Internet access, and uses a SOHO firewall that doubles as a DHCP server. This firewall filters out Internet-based attempts to access Pixel's servers and desktop computers, but admits email, web, and SFTP (Secure FTP) traffic destined for specifically hardened servers.
Pixel produces short animation movies for advertiser clients. These clients are located worldwide and need to communicate securely with Pixel as they collaborate on their advertising shorts. Pixel uses its high- speed Internet connection both to support the exchange of movie shorts as well as for email and general Internet web connectivity.

The network has the following additional specifications:

1. The network is all TCP/IP based
2. The network is based on Cisco routers and switches
3. All desktop computers include email, Web, database access, and office productivity software
4. Creative users also have multimedia authoring software installed
5. All server and critical network equipment is in a secure server room
6. Printers are located around the office area
7. The multimedia department uses high-end workstations for video rendering and animation
8. A load-balancing dual firewall connects the network to the Internet
There is a wee security policy in place:
1. All email must be secure so it cannot be inadvertently sent to the wrong party or intercepted
2. All network resources and equipment must be password protected
3. Company equipment may not be used for personal business
4. All Windows-based PCs must run approved anti-virus and anti-spyware programs
5. All servers and desktops should run host-based intrusion detection software
6. Clients may use the Secure FTP (SFTP) server to send or receive multimedia files but under no circumstances should one client be able to view the files of any other client
7. The mail server must be configured not to forward email that originated on the Internet
8. Password aging must be enforced on all servers and desktops
9. All server configurations must be readily available to rebuild a failed system
10. Off-site backup is required, with 24x7 access to that location
11. All employees will demonstrate they understand the security policy
12. The security officer reports directly to Pixel's CEO