World Software Corporation

1
World Software Corporation Security Program
Group C Cottrell, Mitchell Hopson, Steven 
Moleyar, Krishna Mohan Nicholas, James
Wilhelm, Zachariah
2
Outline

• The security program will be divided into 10
  different sections
• Each section will have a manager
• Each team member will be a managing 2 sections
• Overlapping concepts and situations will be
  handled through discussion with respective
  section managers

3
Security Program - Sections

• 01 - Security Management  
• 02 - Security architecture and models
• 03 - Access controls and methodology
• 04 - Applications and system security
• 05 - Cryptography
• 06 - Telecommunications / network security
• 07 - Operational Security
• 08 - Physical Security
• 09 - Business continuity / Disaster Recovery
• 10 - Laws, investigations and Ethics

4
Preview

• James
• Security Management  
• Security architecture and models

5
Preview

• Krishna
• Applications and system security
• Cryptography

6
Preview

• Zach
• Telecommunications / network security
• Operational Security

7
Preview

• Mitch
• Physical Security
• Business continuity / Disaster Recovery

8
Relocate Main facility

• Pembroke pines area
• Multiple major routes
• Better utility support
• Multiple Network options
• Second location in St Louis
• Multiple network options
• Good utility support
• Multiple major routes

9
Structure

• Poured concrete structure (Including roof)
• Rear area emergency exits steel with no outside
  hardware
• Public area Normal windowed brick veneer glass
  entry door
• Multi-room construction
• Public space (low security)
• Work space (higher security)
• Server space (Highest security)
• Power / services room
• Security storage vault
• Poured concrete annex
• Housing backup generator and fuel source

10
Services

• Both locations to have similar services
• Primary hardwire or Fiber network service
• Backup satellite network service
• Backup power services
• UPS support for all machines and critical systems
  for 30 minutes
• Building power spilt into 3 priority segments
• Backup generator
• Sized for total building load 25
• Fuel supply for 3 days with hot fill tanker
  support connection to provide unlimited run time

11
Internal Security

• Card swipe Pin on all access doors
• Receptionist (daytime) / Security guard (Nights)
• Exit only doors (no entry) from work area to
  outside. All entry into work area from manned
  reception area.
• Glassed in server room with same access only from
  work area.
• Security cameras
• Server room (no dead spots)
• Work room
• Low security area

12
Fire protection

• Main work area and public space
• Standard sprinkler system
• Server room
• Clean gas suppression system
• Power / services room
• Clean gas suppression system
• Spot Dry chemical system
• Fully alarmed and connected to a central alarm
  company facility

13
Server / backup

• Each location to contain identical servers in a
  mirror configuration
• Automatic switchover of licensing servers on
  failure of primary system
• Backup and storage of backups done at secondary
  location

14
Recovery

• St Louis site to normally support a portion of
  the engineering and support staff
• Enough equipment to temporarily shift all
  required operations to either location
• Enough space to add equipment to move all
  operations to either location for moderate period
  of time.

15
Preview

• Steve
• Laws, investigations and Ethics
• Procedures/Documentation/Assembly