E4. Tables 3.3 and 3.4 describe the security policy for Bobs tower computer in the suites common room. Consider the risks that led to this policy. Does Bobs situation justify volume encryption? Why or why not?"

E4. Tables 3.3 and 3.4 describe the security policy for Bobs tower computer in the suites common room. Consider the risks that led to this policy. Does Bobs situation justify volume encryption? Why or why not?"

TABLE 3.3 Policy for user isolation # Risks 1 Policy Statement All users shall be able to execute customary application programs and operating sys- tem service programs. 1 2 4 3 Each user shall have a separate login and, optionally, a password. Programs shall be protected from damage or other modifications by regular users. Files belonging to one user shall be protected from any access (read or write) by other users. 1,3 1, 2,5 TABLE 3.4 Policy additions for Bob's particular situation Risks 5 Policy Statement The system shall have two regular users: Bob and Suitemates. Bob shall have a password to protect his login. 4,6 6 2,4,5,6 7 Suitemates shall not need to type in a password to log in. 1 TABLE 3.3 Policy for user isolation # Risks 1 Policy Statement All users shall be able to execute customary application programs and operating sys- tem service programs. 1 2 4 3 Each user shall have a separate login and, optionally, a password. Programs shall be protected from damage or other modifications by regular users. Files belonging to one user shall be protected from any access (read or write) by other users. 1,3 1, 2,5 TABLE 3.4 Policy additions for Bob's particular situation Risks 5 Policy Statement The system shall have two regular users: Bob and Suitemates. Bob shall have a password to protect his login. 4,6 6 2,4,5,6 7 Suitemates shall not need to type in a password to log in. 1