The following report will address the three main IT infrastructure domains that the Richman Investments “Internal Use Only” data classification policy applies to. “Internal Use Only” is used to classify any internal data shared within our organization that may or may not be confidential in nature but is not intended to leave the company. The three main domains affected by this policy are the User Domain, Workstation Domain, and the LAN Domain.
The User Domain is anyone who accesses the company’s information system and is the weakest link in the ...view middle of the document...
The Human Resources department will be responsible for ensuring that all employees have signed an agreement to the AUP. All employees must pass a background check and their identities verified by HR before any access to Richman’s systems are granted.
The Workstation Domain is where most users will connect to Richman’s IT infrastructure. This includes all desktops, laptops, PDAs, smartphones, and tablets. No personal devices or removable media will be allowed to connect to Richman’s system. Any devices or removable media needed to conduct business will be issued by Richman’s IT department and be used for official matters only. Once HR has verified that the person has passed all identity and background checks they will inform the IT department of what access to the system the position requires. The IT department will ensure that a username and password are set up and must be used to access the Richman infrastructure. IT will also ensure that the person has the proper access to any applications, data, or systems needed to perform their duties. IT will be responsible for ensuring that anything that falls in the Workstation Domain has up to date software revisions, security patches, and proper system configuration.
The LAN Domain