SECURITY IMPLICATIONS OF INTEGRATING SYSTEMS

On-boarding/Off-boarding Business Partners

On-boarding - Whenever we introduce new people into our business environment, we are introducing new risks. We have to allow them to understand the security practices withing the orgnization.

Off-boarding - Means when we remove some of the staff from our bussiness invironment or we end bussiness partnership with other orgnization. Here we have to ensure that they do not pose risk for the orgnization and they do not have access to the system.

Social Media Networks And/Or Applications 

We need to be very careful about how much or what kind of information our staff is sharing on the social media. Also we have to know that how much permissions we are giving to the APPS that are installed on our phone.


Interoperability Agreements



You can think of this like if you’re working with a third party that provides you with web hosting, or with payroll, or with management of your firewall. In each of those cases, there’s probably data that is being seen, viewed, or stored by a third party. And in that particular case there needs to be agreement of what happens with that data.


Service Agreements

A service-level agreement is defined as an official commitment that prevails between a service provider and a client. Particular aspects of the service – quality, availability, responsibilities – are agreed between the service provider and the service user. 


Business Level Agreements  

Business level agreements require a business framework within which to work. They additionally require an understanding of what impact an outsourcing partner can have in the delivery of a service. By understanding the measures and the most effective charging model, it is possible to free the customer from technical concerns and allow them to focus on operating their business effectively. 

Business Level Agreements for IT represent understanding the business service, understanding the measures, understanding the charging model and finally constructing a contract that motivates the partner in line with the business objectives.

Memorandum Of Agreement (MOA)

A memorandum of agreement is a written document describing a cooperative relationship between two parties wishing to work together on a project or to meet an agreed upon objective. An MOA serves as a legal document and describes the terms and details of the partnership agreement. An MOA is more formal than a verbal agreement, but less formal than a contract. Organizations can use an MOA to establish and outline collaborative agreements, including service partnerships or agreements to provide technical assistance and training. An MOA may be used regardless of whether or not money is to be exchanged as part of the agreement.

Interconnect Security Agreement 

Interconnect security agreement provides guidance for planning, establishing, maintaining, and terminating interconnections between information technology (IT) systems that are owned and operated by different organizations. 


Privacy considerations

In privacy considerations we need to focus on good and secured connections with other parties. Also, the terms and conditions should only be down to the interested parties and no third party should get involved in this business. 

Risk Awareness

While entering in the agreement, one must not ignore the fact that there are some risks too which can be associated. Like while signing the documents, one must make sure he is signing right paper and there are no hides terms and conditions which can endanger the business in the future.

Unauthorized Data Sharing

An unauthorized data sharing can always be a headache for one since by doing this, he always stays vulnerable for some external attacks and the data can be stolen as well though the black mailing.

Data Ownership

When data belongs to some party, that party must perform some actions to ensure that the data stays in the ownership and he can get some patients or trademark for that.

Data Backups

Data is normally kept in some storage and many of these devices are volatile. One might lose all the data if one mistake is done. Hence it should be backed up. Now it's up to one whether he wants to get it in some other storage device as back up or want to create the windows back up every day so that he can always have secure point he can go to if something happens to data.

Follow Security Policy And Procedures

All the security policies and the procedures which have been given are made for the security of the people. So users must obey those rules to get their data safe and completed.

Review Agreement Requirements To Verify Compliance And Performance Standards

Having the agreement alone isn't a big thing. Anyone can sign any contract and there should be the review too for the agreements. It is done to ensure that the rules which have been made and the performance standards which have been set are being followed by the parties involved.

So, one might have many options through which he can get himself secured against the data lost and theft. There are many risk out there which can affect the performance of the firm so one firm should take very possible step which it can for safe guarding it's rights and should adhere to the policies which are made only for the betterment of all the parties which are involved in the contract. Moreover, having some legal contracts can also provide some edge to the parties entering in some contract since it can enable the parties to fight for their rights with some acceptable and appropriate proof if some violation of the agreement or the act is done any time during the agreement period.

No comments:

Post a Comment

Popular Posts