Critical Thinking: Systems and Controls Assessment (50 points)

Assignment Details:

Assume you are a manager in a large international organization. You have been asked to assess the company’s information systems and security controls.

• Describe identification, authentication, and authorization.
• Explore whether or not you would use Windows ACLs and explain your reasoning.
• Evaluate best practices for managing Microsoft Windows and application vulnerabilities.

Keep in mind, we are more interested in your ability to describe the steps you would take to review security goals than providing an answer to this scenario. Remember the strategy of Think, Plan, Design, Implement, and Evaluate.

Deliverables:

Your paper should be 4-5 pages in length and formatted according to Saudi Electronic University academic writing standards and APA style guidelines. Use at least two scholarly sources as well as information from your module to support your decision.

Answer preview

During system and controls assessment, there arise terms that an analyst must have subtle knowledge about for a successful evaluation to be made. Some of the terms include identification, authentication, and authorization which are essential so that an analyst can be able to distinguish the various user access specifications in a system. Each of the terms has a different level of access that a user can achieve and are mostly used to limit access to a network by unwanted users to safeguard the information stored. For the protection of a system, windows have an Access Control List (ACL) feature that helps identify users and give information about the access rights they are given. The windows ACL acts as a security enhancer because it tends to provide details about access protocols…

(600 words)