• Analyze appropriate security controls for a given scenario.

Assignment Requirements
Shovels and Shingles is a small construction company consisting of 1 multi-purpose server and 25 networked workstations and laptops. All employees have Internet access and use email. The construction manager and workers use tablet PCs in the field.

The following are types of security controls:

• Administrative controls: Policies approved by management and passed down to staff, such as policies on password length
• Logical/technical controls: Control access to a computer system or network, such as a username and password combination
• Hardware controls: Equipment that checks and validates IDs, such as a smart card for or security token for multifactor authentication
• Software controls: Controls embedded in operating system and application software, such as NTFS permissions
• Physical controls: Control entry into buildings, parking lots, and protected areas, such as a lock on an office door

Answer the following question(s):
1.    What are two types of data and connections that Shovels and Shingles should protect?
2.    Which types of security controls would protect that data?