Part 1:

American Insurance does not have a computer security specialist. In the last two years the company has experienced many computer-related problems, including:

Terminated an employee for using her supervisors password to print confidential payroll information

Losing productivity because employees use the Internet for personal use instead of doing their job

An employee accidentally downloaded a computer virus from a web site that damaged his computer

Confidential customer data was stolen from the companys server by an outside hacker

An employees laptop computer was stolen off his desk while he was at lunch

American Insurance has decided to pay you $50,000 per year to be its new Director of Information Security. Using bullet points, explain ten security policies, procedures, and/or technologies you would put into place during your first year on the job. For each strategy, you must explain one type of security problem that the strategy would attempt to prevent. The security problem does not have to be from the list provided above.

Part 2:

Assume that American Insurance does not have a disaster recovery plan. A disaster recovery plan contains information about how to get a business back up and running AFTER a natural (earthquake, flood, tornado) or man-made (bombing, fire) disaster occurs. Under your answer to Part 1 enter a few blank lines, type Disaster Recovery Plan, and then use bullet points to explain five things that should be part of the disaster recovery plan for American Insurance.