Public Key Infrastructure Suppose you are the Information Security Director at a small software company. The organization

Question:

Public Key Infrastructure Suppose you are the Information Security Director at a small software company. The organization currently utilizes a Microsoft Server 2012 Active Directory domain administered by your information security team. Mostly software developers and a relatively small number of administrative personnel comprise the remainder of the organization. You have convinced business unit leaders that it would be in the best interest of the company to use a public key infrastructure (PKI) in order to provide a framework that fosters confidentiality, integrity, authentication, and no repudiation. Email clients, virtual private network (VPN) products, Web server components, and domain controllers would utilize digital certificates issued by the certificate authority (CA). Additionally, the company would use digital certificates to sign software developed by the company in order to demonstrate software authenticity to the customer. Write a three page paper in which you: 1. analyze the fundamentals of PKI, and determine the primary ways in which its features and functions could benefit your organization and its information security department. 2. Propose one (1) way in which the PKI could assist in the process of signing the company's software, and explain the main reason why a customer could then believe that software to be authentic. 3. Compare and contrast public and in-house CAs. Include the positive and negative characteristics of each type of certificate authority, and provide a sound recommendation of and a justification for which you would consider implementing within your organization. Explain your rationale. 4. Use at least three (3) quality resources in this assignment from material outside the textbook. The specific course learning outcomes associated with this assignment are: • Explain how businesses apply cryptography in maintaining information security. • Use technology and information resources to research issues in information systems security. • Write clearly and concisely about network security topics using proper writing mechanics and technical style conventions.
Fantastic news! We've Found the answer you've been seeking!

Step by Step Answer:

Related Book For  book-img-for-question
Question Posted: