How Greiblock Credit Union Can Strengthen its Policies and Procedures to Address Issues

GCU’s Policies and Procedures
Student’s Name
Institutional Affiliation
GCU’s Policies and Procedures
Overview
The goal of this security manual is help Greiblock Credit Union (GCU) strengthen its policies and procedures to address various situations, but not limited to cyber-attacks, identity theft and fraud. The policies and procedures that have been outlined in this manual are developed based on a set of metrics that will be used to determine their effectiveness. Moreover, this metrics will be used to alter the policies according to fit the situation. The manual specifically addresses dynamic vulnerability analysis, intrusion detection and incident response. The metrics upon which the policies are based will address what will be measured, how it will be measured and the actions that will be taken. Technical and social aspects of major areas of this manual will be addressed as well.
It is prudent for GCU to have active policies and procedures in place to respond to any security breach. However, to do so critical areas need to be identified and GCU has done so. Therefore, a policy and procedure outline will enable the organization maintain its integrity to its members. Therefore, the identified critical areas must be understood. The dynamic vulnerability analysis enables the organization to test and evaluate its systems in real time. The objective of this analysis is to identify any security errors present in a system while it is in use (Dynamic Analysis, 2017). The analysis utilizes web applications to establish vulnerabilities by conducting actual attacks on the systems (Dynamic Analysis, 2017).
The intrusion detection system (two types active and passive) monitors any malicious activities and is designed to notify the system in case a threat is detected (Bradley, 2016). The active system is programmed to block threats automatically while the passive only monitors and analyses the traffic (Thomas, 2017). The objective of this system is to detect any threat trying to bypass the implemented security control measures (IDFAQ, 2017).
The last critical area identified by GCU is the incident response which addresses what incidents are and the steps to be followed in case they occur. This is addressed by an incident response team whose objective is to address situations in a timely and cost effective manner (Rouse, 2005).
Purpose
The purpose of this policy is to establish direction, procedures and metrics that can be used to maintain confidentiality, integrity and security that will ensure availability of information, communication and computing services within the organization. The aim is to decrease fraud, identity theft and cyber-attacks by strengthening the security levels and integrity of its systems. This policy manual will address dynamic vulnerabilities, intrusion detection and incident response.
Scope
This policy manual will be applicable to all employees and processes utilizing information, communication, computing systems and applications that have been developed, installed and owned by the organization. Due to security considerations of the organization, no IT services that will be outsourced, therefore, they will performed and maintained in-house. This will enable the training ...