Protecting ICT systems + legislations

Protecting ICT systems + legislations

1. Hardware Measures

   • No CD/DVD drives

2. Software measures

   • Network operating systems have built in security e.g. usernames and passwords
   • No access, read only, read/write, read/write/delete, full control
   • Control and block downloads
   • Network security
     • Useful to track down abuses of that network
     • records users that have logged on at a time/date and when they logged out
     • Automatically save files

3. Procedures

   • Training - understand penalties + define backup procedures

4. Legislations

   • Data Protection Act 1998
     • Regulates how personal data is stored.
     • To gain their data they must register with the commissioner stating what they want to be held, how long, what they intend to do with it and who it is to be passed on to.
     • Rights
       • See what is being held
       • Errors corrected
       • Refuse to allow data for direct email
       • Refuse to allow sensitive data to be processed
       • Complain to commissioner of act abuse
       • Claim compensation
     • Getting access to the data
       • Written request - provided with all data held about you
       • Prove identity
     • Commissioner role
       • Enforcing and overseeing the act
       • Raising awareness of the act and implications
       • Investigating complaints
   • Computer misuse act
     • 1) Unauthorised access to computer material
     • 2) Unauthorised access with intent to commit of facilitate commission of further defences
     • 3) Unauthorised modification of computer material e.g. changing account figures
     • Action to deal with Misuse
       • Training
       • Security mechanisms e.g. firewalls and antivirus software
   • Copyright, designs and patents act 1988
     • Data such as music files, videos and software cannot be used without permission or a license (bought)
     • License's
       • Single user - install software on a single machine
       • Multi-user - software on multiple achiness
       • Site license - many users within the site