You have been retained as a consultant to the Bentley Company, and the primary r

Question

You have been retained as a consultant to the Bentley Company, and the primary reason they think they need your expertise is to help them identify a problem with retaining their best employees. Bentley maintains a very large computer system that supports over 235-networked PCs. The company maintains fairly extensive databases regarding its customers. These databases include customer profiles, past purchasing patterns, and prices charged. Recently, Bentley has been having some major problems with competitors. One competitor in particular seems to be very clever at taking away the company's customers. Apparently, this competitor is offering Bentley's customers identical products at lower prices.

In your opinion, what is the possible security problem at Bentley?

What can you recommend to the management at Bentley to mitigate this problem?

Explanation / Answer

Recommendation to the management of the Bentley Company :

1. Implementation of a robust Data protection Policy : Currently, its seems that senstitive information is been passed on to the competitors such as pricing, purchasing patterns and customer profiles . If a data protection policy is set it would prevent the data to flow outside the organisation.

2. Rights and restrictions : All employees should not have access to personal and sensitive data about pricing. The internal IT deptartment create a log of the employees using such sentitive informaiton. There are 235 networed Pc's connected to one main computer that majorly stores the data. If any user request to access sentitive information , there should be approval from the managment of the company on the usage.

3. Prevention of Data Leak : Sensititve information should be kept in a seperate drives and folders. Strcit penalty and legal actions to be imposed in case of a data Breach. Backup of information must be kept in a secure place . Any unnecessary paper /hardcopy of sensitive documents should be shredded immediately.

The company must ensure to strong access controls to solve the current problem.

Related Questions

Navigate

• Browse (All)
• Browse Y
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.