Posted: August 4th, 2022

Create a policy and processes

Topic:
create a policy and processes
Assignment 4:

You have been hired to perform digital investigations and forensics analysis for a company. You find that no policies, processes, or procedures are currently in place. Do an Internet search to find information, and then create a policy and processes document to provide the structure necessary for your lab environment.

After answering the questions, save the file with LastnameFirstname_Assignment4 (eg., JohnSmith_Assignment4) and submit it right back here under Assignment 4 for ~ Hire our professional writers now and experience the best assignment help online with our custom paper writing service. We ensure your essays and assignments are expertly researched, written and delivered on time. ~ Grading.

Assignments are due by 11:59 p.m. Eastern Time on Sunday of Week 4.

—-

Structures Needed to Create Policy and Process Document for a Forensic Lab

Policy and process are detailed documents that may come in handy for organization’s compliance. They are important because they help provide structure for meetings, analysis and reporting by critically allowing organizations to identify and define challenges. They also work to critically work around this challenges, mitigate them from taking place and even overcome them. Cox (2016: 2024 – Do my homework – Help write my assignment online) identifies that policies and procedures are important in that they help to handle policies before they happen. They are critical in promoting conflict resolution, they help organizations avoid costly incidences and promote due diligence. As such, they establish a standardized procedure for evaluation; preventing financial and legal risk for companies. Policies and processes also come in handy in shaping company’s culture by defining its internal processes.
The following policy and process document manifests through Rational Choice Policy Making Model. The rational choice model identifies that individual choices are made of the basis of policy where, the company assesses its best interest, cooperates with other stakeholders to create an elaborate policy and process document (Harries, 2014: 2024 – Essay Writing Service. Custom Essay Services Cheap). The forensic policy is for the hypothetical company XYZ, XYZ features a very high value Microsoft SQL database which uses a weak public server, several firewalls, and Microsoft System Center networks. The company additionally uses the free Suricata Network Intrusion Detection System. XYZ considers any act of breeching through this systems worthy of prosecution. So far XYZ has never encountered a problem or forced and unauthorized intrusion within its servers. But there is always a risk due to its large customer, employee and third party temporary gig workers with strict periodic access to the servers.
The following Forensic Policy Document was drafted pending implementation. The document aims to mitigate XYZ servers from breech.
Forensic Policy and Process
1. All forms of access to Microsoft SQL need to be monitored and logged. This is for the benefit of accountability and strictly controls the number of people who access the server logging them by their purpose of access.
2. Access codes, logs and administration logs into Microsoft SQL database will be well-maintained for a period not more than 3 months. Employees will need to personally present their log in schedules, and activities at the end of this period and be provided new ones pending approval of their activities.
3. Firewall and Snort will be kept for less than six months
4. Microsoft System Center network logs will also be kept for a duration less than six months.
5. All access and activity will be monitored and reported on a monthly basis
6. Routers logs will be changed after every six months.
7. There will be a network speed test and anomaly test at the end of every week. This is aimed at identifying congestion and is aimed at detecting aspects when the network looses traffic to establish periods where it is most vulnerable.
8. Employees will be trained regularly and expected to master the policies.
The above policy will come in handy and help evaluate the network security periodically. It will also log in all forms of access as such, be easier to identify the breaches that may occur. This will also work to sustain an employee culture of accountability and compliance creating an all round respect for company activity.

References
Cox. (2016: 2024 – Do my homework – Help write my assignment online). Master Writing Policies, Procedures, Processes, and Work Instructions. Retrieved from https://www.smartsheet.com/company-policies-procedures#:~:text=They%20provide%20an%20umbrella%20under,transformation%20of%20inputs%20into%20outputs.%E2%80%9D
Harries. (2014: 2024 – Essay Writing Service. Custom Essay Services Cheap). Bridging policy and delivery with knowledge: the case for intervention. In in Records Management and Knowledge Mobilisation, 2014: 2024 – Essay Writing Service. Custom Essay Services Cheap.

Order | Check Discount