Question

John wants to create a security policy in order to protect his organisation's electronic commerce assets. He needs to follow a five-step process when creating this policy. Briefly describe this process?

Answer 1

Protect Electronic commerce Assets:

The process to protect the Electronic Commerce assets is necessary in commerce is to grow strong. The elctronic world will always have to deal with the virus destructive programs etc. Whose goals are to delay in the communications and information flow between the consumers and the producers. Thus the organisation concerned about protecting the electonic commerce assets should ave the protecting policies.

The security policy primarily address physical security, networking securiy, access authorization, virus protection and disaster recovery.

The security policy is a living written document which is reviewed and also updated at regularly.

In order to ensure the minimum level of acceptable security for the electronic operations , the security policy were to fulfil the basic requirements.

Secrecy

The secrecy refers to prevent the unauthorized person from reading the messages , business plans, to obtain the credit card numbers or also deriving the any other confidential informations.

Integrity

The integrity refers to ensure that the communication received has not been altered or tampered with for the type of enclose information in a digital envelope so that the computer can detect the messages automatically.

Key management

Key management provides the secure distribution and the management of keys which is needed to provide the secure communications.

Non-repudiation

The non-repudiation refers to ensure that none of the parties involved can be deny an operation at a later date. it provides end to end proof of each messages origin and recipient.

Authentication

Authentication were securely identifies the clients and the servers with digital signatures and the certifications etc.

Thus the organisation must protect assets from unauthorized disclosure and modification or destructions.