Recommend a mechanism that will record event data on the folders for each depart
ID: 3832246 • Letter: R
Question
Recommend a mechanism that will record event data on the folders for each department. What events should be logged and how often do these logs need to be reviewed?
Recommend an implementation for antivirus software. Suggest a product (or products) for the organization and explain your reason for choosing that product.
Recommend a mechanism for monitoring security alerts on the server. What types of events need to be monitored and how often do the security logs need to be reviewed by a human being as opposed to an automated process? Explain your answer.
Describe the implementation process and timeline for your recommendations. Try to give as reasonable a timeline as possible and explain your plan.
Explanation / Answer
1) There are many third party service providers who gives service to this type of services i..e there are some softwares which are licensed which we can set the particular event and this software stores the logs and screen shots to the particular destination.
The events for these would be the specific to each department. The event might be when the most confidential folder is accessed, when the new users are get added, when the guest users are using the technical information etc. These are some types of events.
2) I would suggest quickheal antivirus because this software works very good and efficient. This scans daily in the specified times and also when every time internet is accessing or when the disk drives are connected etc .
And this antivirus software just repairs instantly the effected files when the virus is found rather than deleting files. It continuously observes the system and doesn't allow any virus.
3. Servers will defaulty raise exceptions for this security alerts. And also we need to check the logs continuously for the security breaches or any unauthorised access is happened then only the system will be fine.
The events like unauthorised access,virus alerts etc.. like this whatever you think that may harm your business or data. Generally it is good that to be upto dated in this security alerts otherwise we can't do any after the harm is happened.
4) There is not that big process to implement just inorder to implement this we just need to buy couple of licensed softwares as well and need to get installed. After that make the settings like you want and then just finish it off. Then they will automatically do their work daily and we need to monitor all those accordingly. To implement this software doesn't take much time than couple of hours.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.