Based on the security objectives in the following table, design an enterprise encryption strategy, a public key infrastructure (PKI) that supports internal employees, external business partners, and clients.

Richman Investments is an investment and consulting firm. Richman wants to expand its business operations both in the U.S. and in foreign countries. Richman intends to eventually have 10,000 employees in 20 countries.

The Richman corporate headquarters is located in Phoenix, Arizona.

Currently there are eight branch offices in:

Atlanta, Georgia
Chicago, Illinois
Cincinnati, Ohio
Denver, Colorado
Los Angeles, California
Montreal, Canada
New York City, New York
Washington, D.C.

The North American offices have a total of 5,000 employees who use desktops, laptops, and wireless devices. All offices deal with several sensitive applications. Management from each office shares application information hosted at the corporate office.

Instructions:
Based on the security objectives in the following table, design an enterprise encryption strategy, a public key infrastructure (PKI) that supports internal employees, external business partners, and clients. Include the design and reasoning for using the selected encryption strategy.

Security Objective Description

Privacy or confidentiality –

Keeping information secret from all but those who are authorized to see it

Integrity –

Ensuring information has not been altered by unauthorized or unknown means

Entity authentication or identification –

Corroborating the identity of an entity, for example a person, a computer terminal, or a credit card

Message authentication-

Corroborating the source of information, also known as data origin authentication
Signature Binding information to an entity

Authorization-

Providing conveyance, to another entity, of official sanction to do or be something

Validation –

Providing timeliness of authorization to use or manipulate information or resources

Access control-

Restricting access to resources to privileged entities

Certification –

Endorsing information by a trusted entity

Timestamping-

Recording the time of creation or existence of information
Witnessing Verifying the creation or existence of information by an entity other than the creator

Receipt-

Acknowledging that information has been received
Confirmation Acknowledging that services have been provided

Ownership-

Providing an entity with the legal right to use or transfer a resource to others

Anonymity –

Concealing the identity of an entity involved in some process

Nonrepudiation-

Preventing the denial of previous commitments or actions
Revocation Retracting certification or authorization

Submission Requirements

Format: Microsoft Word or compatible
Font: Arial 12-point, double-spaced
Citation Style: Follow your school’s preferred style guide
Length: Minimum 7-10 pages of writing (not including cover page and cited resources page)
Cited resources

Last Completed Projects