Saint Mary’s University Bayombong, Nueva Vizcaya SCHOOL OF ENGINEERING, ARCHITECTURE AND INFORMATION TECHNOLOGY 4719 IAS02 Student ID Student Name 33138180 Alldriv Zim Cuenca Date of Submission Instructor Adonis Garces Human Resources Security 1. Only authorized personnel can come nearby voting machines. 2. Only Personnel with access key can manipulate and operate the voting machine. 3. Provide personnel that are knowledgeable in voting processing. 4. Make sure that personnel are all understand their roles and responsibilities of their duties. 5. Make background verification before accepting them as an election personnel. 6. Get personnel that are working in COMELEC so that they have knowledge in doing the voting processes. 7. Each personnel should have attend the cyber security training. 8. Each personnel should have individual manual in security controls. Asset Management Controls 1. Make sure that the asset is free from software attacks 2. Make sure that you have continuity plans if something happens in election days to ensure the data of the asset. 3. Make a system that alert IT teams if there is a cyber-attack that are going on in the assets. 4. Provide IT teams to secure that there is no malware or software attack may happen during election period. 5. Provide physical protection to the asset like a hard case to protect it from natural disaster like earthquake or typhoon. 6. Make sure to have a backup plans or systems to keep the functions of operation if cyber-attacks may happen. 7. Make sure that all the assets has been inventoried so that if one of them is missing, you can report it to local authorities. 8. Ballot boxes should have finger print access to the personnel that are in charge guarding it. 9. When delivering the voting machines to each precincts there should be a police/military escort and the same when returning the assets. Physical Security 1. Secure perimeter areas with putting police personnel in every area. 2. Each precinct should have at least 3 guards to watch for possible insider threats. 3. Put spy outside the precinct to spot possible threats to the data. 4. Put a sensor in each voting machines so that if it is removed, everybody will be alarmed. 5. Put surveillance cameras to all precincts to watch the movement of each voters. 6. Phones, or any recording equipment are not allowed inside the precincts. 7. Drinking and eating food inside the precincts are not allowed. 8. Make sure to have backup generator when power interruptions occurred. 9. Put fire extinguisher when fire may occur. 10. Make sure all the cables are set and organized properly so that short circuit may not happen. 11. Put water resistant in each voting machines so that if rain or typhoon cannot penetrate the machine.