Rlht Task 2

A. Create three agreemental form _or_ system of g overnment statements that may fool prevented the gage breach. During a routine audit of the electronic health destroy system, a security breach was discovered. The lack of a enter retention, log audit, or remote access constitution contributed to the unauthorized access. * Log retention insurance policy statement: The absorbed of this policy statement is to provide the institution guidance on information systems security log retention. Log rotation impart be conducted on a daily basis with turn logs stored on a shared network resource. Daily backups of the rotate logs leave alone be conducted. The backups will be retained for 12 months locally with a weekly copy stored offsite. * Log auditing policy statement: The intent of this policy statement is to provide the organization guidance on information systems security log auditing. The resolve of routine log review is to identify possible security incidents, potential operational problems, or policy violations. Security logs will be reviewed daily. Careful attention will be do to events pertaining to account creation and account modification. * Remote access policy statement: The intent of this policy statement is to provide the organization guidance on information systems remote access.

Due to the fond nature of the information stored on the electronic health record system remote access needs to be die secured and controlled. Two-factor authentication for will be used when accessing network resources remotely. Additionally, constituent based access will be used to buy the farm a line what resources will be accessed remotely. 1. Justify each organizational policy statement on a nationally or internationally recognized standard. Log Retention: In this scenario the attacker patiently executed his or her plan to gain access over several months, avoiding detection, and exploiting the lack of long term security log retention. The Guide to Computer Security Log Management,... If you want to get a full essay, order it on our website: Ordercustompaper.com

Ordercustompaper.com is a professional essay writing service at which you can buy essays on any topics and disciplines! All custom essays are written by professional writers!