General Office Essay

1.0 Introduction Accountant General Office (AGO) is one of the government agencies under Ministry of Finance which holds the responsibility to prepare and consolidate comprehensive accounting and financial services for the government to improve the public sector accountability. The main task is to assist government in making effective decisions especially in budget allocation and financial related matters. AGO has one headquarters consists of 8 floors and 36 branches across the country and has more than 300 employees working all over Malaysia. The focus of the research study is the Information Technology Division (ITD) of AGO which is located at the level 5 of the main office building at the present 2, Putrajaya. There are more than

It covers both the Perimeter Protection (PP) and Access Control (AC). Perimeter protection is merely about the approach or technique used to prevent unwanted physical entries into the protected or restricted area [2]. Access control is usually divided into two mechanisms of protections which are physical and logical. Physical approach is to control over unauthorized access or restrict any attempts to break in physically whereby logical approach is to control over both physical and online access

For example vendors who have business with government may have to access the critical infrastructure at the sites such as data center to perform their job. Access control is implemented to limit or restrict the access to the resources by giving the necessary permissions or control the access through appropriate tools such as access card and individual identification [4]. Uncontrolled physical space makes it easy for an attacker to subvert the security measurements and mount an attack easily. Access control works when the authority gives authorization to a particular person to enter the resource [11]. An addition to that, authentication has also became the fundamental countermeasures for many organizations against any illegitimate access to sensitive information. It is knows factor that authentication provides a defense in depth factor in controlling the access. Because of increasing level of threats, authentication through a single layer is not adequate and may not reliable to provide total security. Hence, a multi-layer authentication is necessary to provide continuous protection to the protected area such as data center [12][20]. Multi-layer security mechanisms such as finger print access control management could bring an extra layer protection whereby it authorizes a user through biometric authentication. In fact,