Riordan
Riordan
Riordan Manufacturing
Information Systems Security Recommendations
Team Mars Inc.
CMGT 440-Introduction to Information Systems Security
Mr. Levi A. Royster
April 17, 2006
TABLE OF CONTENTS
1.0 HISTORY:
2.0 INTRODUCTION:
3.0 SCOPE:
4.0 RECOMMENDATIONS:
4.1 Physical Security: Operation Class; Physical and Environmental Family (ID:PE):
Table 1; Recommended Common Physical and Environmental Controls
4.2 Network Security: Technical Class; ID & Authentication (ID:IA), Access Control (ID:AC), Audit & Accountability (ID:AU) and System & Communications Protection (ID:SC):
Table 2; Recommended Common Network Controls (IA)
Table 3; Recommended Common Network Controls (AC)
Table 4; Recommended Common Network Controls (AU)
Table 5; Recommended Common Network Controls (SC)
4.3 Data Security: Technical Class; Systems and Information Integrity (SI):
Table 6; Recommended Common Network Controls (SI)
4.4 Web Security: Technical Class; Systems and Information Integrity (SI) and System & Communications Protection (ID:SC) (See Table 5 and 6):
5.0 CONCLUSION:
Riordan Manufacturing
Information Systems Security Recommendations
1.0 History:
Riordan Manufacturing is a global plastics manufacturer employing 550 people with projected annual earnings of $46 million. The company is wholly owned by Riordan Industries, a Fortune 1000 enterprise with revenues in excess of $1 billion. Connected via a Wide Area Network (WAN) it maintains facilities in Albany, Georgia, Pontiac, Michigan, and Hang Zhou, China. The companys research and development is done at the corporate headquarters in San Jose, Ca. Riordans major customers are automotive parts manufacturers, aircraft manufacturers, the Department of Defense, beverage makers and bottlers, and appliance manufacturers.
Due to Riordans current cliental issues relating to Information System Security Assurance arose. To address these issues Mars Inc. has been contracted by Riordan Manufacturing, as network consultants, to provide input on the development of Riordans IT infrastructure. It is the job of Mars Inc. to identifying any physical, network, data security,