CRI3701
ASSIGNMENT 2 SEMESTER 2 2025
UNIQUE NO. 711520
DUE DATE: 24 SEPTEMBER 2025
, Crime Information Systems for Policing
Question 1
1.1 Security measures for different types of information to ensure appropriate
protection
Different types of information require different levels of protection depending on their
sensitivity and purpose. To ensure appropriate protection, organizations must adopt
security measures that address confidentiality, integrity, and availability.
Highly confidential information, such as police records, criminal databases, and
personal identification data, must be protected using strong encryption both when
stored and when transmitted across networks. Role-based access control should be
enforced to make sure that only authorized officers can access specific records. In
addition, audit trails and system logs should be implemented to track all access and
changes to sensitive data. For example, in a police criminal database, each user should
log in with a secure username, password, and a two-factor authentication system. Any
attempts to download, modify, or share records without authorization should
automatically trigger alerts to the system administrator.
For internal and operational information, such as patrol rosters, deployment schedules,
and internal memos, access should be restricted to relevant staff only. Authentication
systems, such as password-protected intranet portals and smart-card access, can help
prevent unauthorized personnel from accessing or leaking operational plans. Physical
measures such as locked filing cabinets and restricted office access also provide
additional security. For example, a police station’s patrol schedule may be uploaded on
a secure intranet that requires officers to log in with a password and a digital token
before viewing the duty list.
Public information, such as press releases and community awareness notices, does not
require strict confidentiality but still needs protection to maintain authenticity and
availability. Digital signatures and secure hosting can prevent tampering and ensure
ASSIGNMENT 2 SEMESTER 2 2025
UNIQUE NO. 711520
DUE DATE: 24 SEPTEMBER 2025
, Crime Information Systems for Policing
Question 1
1.1 Security measures for different types of information to ensure appropriate
protection
Different types of information require different levels of protection depending on their
sensitivity and purpose. To ensure appropriate protection, organizations must adopt
security measures that address confidentiality, integrity, and availability.
Highly confidential information, such as police records, criminal databases, and
personal identification data, must be protected using strong encryption both when
stored and when transmitted across networks. Role-based access control should be
enforced to make sure that only authorized officers can access specific records. In
addition, audit trails and system logs should be implemented to track all access and
changes to sensitive data. For example, in a police criminal database, each user should
log in with a secure username, password, and a two-factor authentication system. Any
attempts to download, modify, or share records without authorization should
automatically trigger alerts to the system administrator.
For internal and operational information, such as patrol rosters, deployment schedules,
and internal memos, access should be restricted to relevant staff only. Authentication
systems, such as password-protected intranet portals and smart-card access, can help
prevent unauthorized personnel from accessing or leaking operational plans. Physical
measures such as locked filing cabinets and restricted office access also provide
additional security. For example, a police station’s patrol schedule may be uploaded on
a secure intranet that requires officers to log in with a password and a digital token
before viewing the duty list.
Public information, such as press releases and community awareness notices, does not
require strict confidentiality but still needs protection to maintain authenticity and
availability. Digital signatures and secure hosting can prevent tampering and ensure
