Racial Differences Of The African American Race - 1233 Words

Racial differences is one of the most common reasons why most disturbances and conflicts happens in our world. The African-American race seems to be dealing with this issue for a very long period of time. Between the early 1900’s and the 1960’s three very influential individuals looked to change the mindset of the African-Americans in their time and establish their way of equality and equity. Where three different mindsets and ideas all with the common goal of raising the average African-Americans human value and worth higher. The oppression of the people of their own race fueled their drive to make a difference. A change was a must and these three individuals I will be talking about were the catalysts behind a movement they believe was going to accomplish that common goal. From Marcus Garvey and his ideas of unifying all African-Americans to their new and own government and nationalism. Then to Malcolm X and Dr. Martin Luther King and their two different approach in t he new wave of racial discriminatory actions in the country but unrecognizable similar ideas. All looking to provide a racial freedom and justice for their people and everyone not giving those opportunities. Marcus Garvey a jamaican migrant who was influenced by the strong nationalism of his home country and the outright unity of all the African-Americans used that in his dissent. Forming the U.N.I.A. that had claimed over 4 million followers he began outletting his outspoken words in creating an all blackShow MoreRelatedRacial Segregation : Made Up Differences1010 Words   |  5 PagesRacial Segregation; made-up differences. Racial segregation is the idea that every race is certainly different, but it also leads to the idea that certain races don’t belong and are barely human. Some people, civilized, educated, yet ignorant people, thought that everyone normal was white. Racial segregation was so strong at first, that many men believed that people of other races were more as property. Many people believe racial segregation was born in the middle of the 1800’s. This is a misunderstandingRead MoreRacial Inequality919 Words   |  4 PagesWhat is racial inequality? Racial inequality is discrepancies in the opportunities and treatment of people based solely on their race. Racial inequality is a serious issue that is often discussed in the American criminal justice system. Although racial discrimination is present in the criminal justice system, some people use the words inequality, discrimination, racism, and profiling loosely and do not understand how truly complex it is to prove that there actually is racial inequality present inRead MoreKey Social Problems Affecting Africans Americans Essay1375 Words   |  6 Pages Though social problems affect a wide variety of people from all races, classes, and cultures; minorities, specifically African Americans, encounter social problems on a multi-dimensional basis. Poverty, employment rates, discrimination, and other social problems strike African Americans in such a way that it is nearly impossible to separate them; each individual has different background, socially and physically, that would determine in which order his or her social problems need to be solved. ImpoverishedRead MoreRacial Skepticism Is The Idea That Race, As A Biological1394 Words   |  6 PagesRacial skepticism is the idea that race, as a biological category, does not exist. Population-level genetic studies have established that race is not discernable as a biological category through genetic variation between races, as genetic variation is higher within folk racial groups than between them. Folk racial groups are categories used on Census forms, the U.S. Office of Management and Budget, and the Federal Drug Administration (FDA). In â€Å"When Socially Determined Categories Make BiologicalRead MoreRace And Racial Relations : Racial Discrimination, Profiling, Criminalization, And Neighborhood Context Essay1490 Words   |  6 PagesRace and racial relations have been a historic battle in our society. Although racial relations have greatly improved within the last century, or even the last sixty years, racial perceptions still persist. These perceptions can be seen in several forms across society varying in intensity, policy and practice on an institutional level as well as an individual level. While racial relations can be taken positively in the form of equality, or negatively as segregation and prejudice rise between racialRead MoreRacism And The Criminal Justice System1190 Words   |  5 PagesIntroduction In today’s American society much of the issues incurred are centered on racism or racial discrimination encompassing crime and the criminal justice system. A vast majority of the issues in the criminal justice system relate to race, ethnicity, or economic class and captures actions by legislators, the policies of the police, and the practices of the courts. In 2009 alone, African American males accounted for 6.7 times more incarceration rates than whites in both state and federal penitentiariesRead MoreRacial Inequality797 Words   |  4 PagesRacial inequality is regrettably imbedded in the history of the United States. Americans like to think of the American colonies as the start or founding of the quest for freedom, initially, the ending of religious oppression and later political and economic liberty. Yet, from the start, the fabric of American society was equally founded on brutal forms of supremacy, inequality and oppression which involved the absolute denial of freedo m for slaves. This is one of the great paradoxes of American historyRead MoreExamination And Views On The Urban Women1218 Words   |  5 Pagesareas of work, they begin to suffer what is called spatial entrapment, meaning that ghetto that the live in is there only way of income even though the surrounding they are in has no economic value to give. In this reading we explore the African American and white women of Worcester, Massachusetts to examine how the rootedness of the poor woman finds ways for survival. We start by exploring welfare reform, the purpose to the reform was to eliminate people of properties dependency on governmentRead MoreRacial Stereotypes : The Film, Crash, Director Paul Haggis1304 Words   |  6 Pagesbecoming more American. Assimilating into the American society usually entails learning English, earning a better income, and behaving in accordance to American customs and norms. However, most attempts of integrating into American society are thwarted due to racial and ethnic prejudice, stereotypes, and discrimination. In the film, Crash, Director Paul Haggis addresses racial inequality by conveying instances of racial stereotypes, social class disparity, and police brutality. The usage of racial stereotypesRead MoreAfrican Americans: Autoethnography. This Past Saturday1712 Words   |  7 PagesAfrican Americans: Autoethnography This past Saturday I attended my neighbors daughters baby shower, whom I have known for about a year. My neighbor is an African American woman, and so is her daughter, along with their family and friends. I didn’t think anything different about myself attending a baby shower and being surrounded by all African American females, until I got this assignment, then it really made me open my eyes when engaging. I was the only white female at this event, and the only

Christian Ethics for Theological and Historical- myassignmenthelp

Question: Discuss about theChristian Ethics for Theological and Historical. Answer: The article The Centrality of Conscience in Eastern Orthodox Ethics by Father Stanley S. Harakas sheds light on the orthodox perspective of conscience through several perspectives. Conscience is perceived as the psychological phenomenon (Klanjek., Vazsonyi and Trejos-Castillo 2012). Conscience makes human psyche to segregate the morally right from the morally wrong. Conscience has a several types of interpretations, as it cannot be analyzed in a uniform manner. According to Socrates interpretation of conscience, Diamon, the conscience is forced phenomenon on human psyche condemning the wrong and praising the right (Klanjek., Vazsonyi and Trejos-Castillo 2012). The eastern orthodox ethics advocates the concept of Guardian Angel and Voice of God in depicting conscience. The centrality of conscience defines the God is absolute good. According to me, the concept of Guardian Angel does not stand. In reality there is no customary angel on anyone`s shoulder to instruct them towards the morally right path and on the hand the devil perched on other shoulder is restricted from doing the right (Bezzerides, Prodromou 2017). Conscience is regulated by the emotions of human being, which is influenced by the factors like, family, environment, and education and genetic. The Eastern Orthodox Ethics also draws the example of Adam and Eve in terms of covering the guilt the conscience is used as the excuse to escape the guilt. According to me conscience is a phenomenon restricts the human from committing wrong so that the guilt does not sting the human psyche (Bezzerides, Prodromou 2017). Lastly, the conscience does not work in a mechanical manner. One has to develop a sharp and enriched conscience. In the article Foundations of a Christian Ethic, the Christian Ethic is defined as a perception of Christian theology that segregates the morally good behavior from the immoral behavior. In terms of Christian Ethic Grenez suggests that there are several perspectives of Christian Ethics, which differ from each other (Glaw 2014). Ethics not always connected to spirit and word. The heteronymous perspective of Christian Ethic focuses on the written draft of scripture. Christian Ethic depends on the external sources, as it believes the God instructed people with the way of living a life (Glaw 2014). On the contrary, the Protestants believe the Bible as the ultimate source of ethereal guidance. In term of regulating human life the Protestant`s view is that Bible is the foundation of life. The law suggests there are some embargoes in leading the daily life, which is directly connected, to specific foods (Niebuhr 2012). According to Grenzs perspective about the foundation of Christian Ethic is related to the Bible, which is considered as the law book of leading a life. Grenz looks into the principles, which is written in the scriptures for primary source of specific laws. Grenz supports the heteronymous perspectives of foundation of Christian Ethics, though the heteronymous perspectives are formed from assumption of the divine revelation. According to Grenz the biblical definition of God is the ultimate creator and there is a fundamental relationship between the God and the earth and the heaven (Niebuhr 2012). Grenz suggest that declaration of the existence of God is the answer of many ethical questions of ethical value of Christianity. References Bezzerides, A.M. and Prodromou, E.H. eds., 2017.Eastern Orthodox Christianity and American Higher Education: Theological, Historical, and Contemporary Reflections. University of Notre Dame Pess. Glaw, A.M., 2014.The Holy Spirit and Christian Ethics in the Theology of Klaus Bockmuehl. Wipf and Stock Publishers. Klanjek, R., Vazsonyi, A.T. and Trejos-Castillo, E., 2012. Religious orientation, low self-control, and deviance: Muslims, Catholics, Eastern Orthodox-, and Bible Belt Christians.Journal of Adolescence,35(3), pp.671-682. Niebuhr, R., 2012.An interpretation of Christian ethics. Westminster John Knox Press.

Animal Testing Essays (967 words) - Animal Welfare, Animal Testing

Animal Testing Essays (967 words) - Animal Welfare, Animal Testing Animal Testing Traditionally, animals have been used to ensure the safety of our consumer products and drugs. Yet around the world, scientists, regulators and animal protectionists work together to develop alternatives to their use. The use of animals in the life sciences dates back to ancient Greece and the earliest medical experiments. To learn about swallowing, physicians cut open into the throat of a living pig. To study the beating heart, they cut open into its chest. For centuries physicians and researchers used animals to enhance their knowledge about how the various organs and systems of the body functioned, as well as to hone their surgical skills. As long as animals have been used in experiments, people have expressed concerns about such research. Questions about the morality, necessity, and scientific validity of animal experiments have arisen since those ancient physicians first began to study bodily functions. Alternatives are methods, which refine existing tests by minimizing animal distress, reduce the number of animals necessary for an experiment or replace whole animal use with vitro or other tests. While vivisection has received more attention and funding, clinical and epidemiological (studying the natural course of disease within human population) studies have had a much more profound impact on human health. In fact, clinical and epidemiological evidence linking smoking to lung cancer was established long before warnings of the dangers of smoking were released to the general public. Because animal experimentation failed to each the same conclusion, warning labels on cigarettes were delayed for years! During this time hundreds of people died from lung cancer because the results of animal experimentation were considered more valid than studies of human patients. Animal based research is the science of the past. There are a number of alternatives available to modern researchers, which a re less expensive, more reliable, and ethically sound. They provide results rapidly, experimental parameters are easily controlled, and their focus on the cellular and molecular levels of the life process provides more useful information about chemicals and drugs. High Productive Volume Tests, test a minimal amount of a product on an abundant amount of animals. Two - hundred baby rats, just three weeks old are placed in wire - bottomed stainless - steel cages. Twice daily Monday thru Friday, laboratory workers pull the small mammals from their cages, force steel clamps into their mouths to hold their jaws apart and swab their teeth with an anti - cavity dental chemical. After three weeks, the workers kill the baby rats by cutting off their teeth. The procedures are called Biological Tests for Tests Flouride Dentifrices and :Determination of Animal Carries Reduction - puzzling terms to most of us. But the meaning is deadly to animals. The officials who order this test work for the U. S. government s FDA has made exceptions for manufacturers, including Toms of Maine, that wanted to market new toothpastes without any tests on animals. If some companies can manufacture safe, effective anti - cavity toothpastes without using any animals, why cant a ll dental product companies stop killing animals? Philosopher Jeremy Bentham sounded the rallying cry for animals everywhere: The question is not, can they reason, nor can they talk, but can they suffer? The Animal Welfare Act sets standards for the housing, handling, feeding, and transportation of experimental animals, but places no limitations whatsoever on the actual experimental conditions and procedures continue to challenge, whether human beings have the right to use animals for any purpose. The HPV Program sounds so important, right? Wrong! Because no resulting action will be taken against the chemicals involved in this program. Instead of protecting the public from hazardous chemicals, the EPA will inform us of how quickly mice and rabbits died when force - fed a chemical, or how many mouse pups were stillborn after their mother was force - fed massive quantities of already known toxic chemicals. Every medical advancement has not been a result of animal testing. Results derived from animal experiments have had a very minimal effect on the dramatic rise of life expectancy can be attributed mainly to changes in lifestyles, environmental factors, and improvements in sanitation. Many medical schools in the U. S. do not use animals in the training of medical students. They include:

5 Words That Dont Mean What You Think They Mean

5 Words That Don't Mean What You Think They Mean You keep using that word, Inigo Montoya says to Vizzini in The Princess Bride. I do not think it means what you think it means. The word that Vizzini so frequently misuses in the film is inconceivable. But its not hard to imagine other words that hold different meanings for different people. Meanings that may even be contradictory- literally so. Of course, its not unusual for word meanings to change  over time. Some words (such as nice, which once meant silly or ignorant) even reverse their connotations. Whats especially intriguing- and often perplexing- is to observe such changes in our own time. To show you what we mean, lets take a look at five words that may not mean what you think they mean: literally, fulsome, ravel, peruse, and plethora. Literally Meaningless? In contrast to  figuratively, the adverb literally means in a literal or strict sense- word for word. But many speakers have a habit of using the word quite unliterally as an intensifier. Take this example from a speech given by former Vice President Joe Biden: The next president of the United States is going to be delivered to the most significant moment in American history since Franklin Roosevelt. He will have such an incredible opportunity not only to change the direction of America but literally, literally to change the direction of the world.(Senator Joseph Biden, speaking in Springfield, Illinois, August 23, 2008) Although most dictionaries recognize the contrary uses of the word, many usage authorities (and SNOOTs) argue that the hyperbolic sense of literally has eroded its literal meaning. Full of Fulsome If your boss showers you with fulsome praise, dont presume that a promotion is in the works. Understood in its traditional sense of offensively flattering or insincere, fulsome has decidedly negative connotations. But in recent years, fulsome has picked up the more complimentary meaning of full, generous, or abundant. So is one definition more correct or appropriate than the other?Guardian Style (2007), the usage guide for writers on Englands Guardian newspaper, describes fulsome as another example of a word that is almost never used correctly. The adjective means cloying, excessive, disgusting by excess, says editor David Marsh, and is not, as some appear to believe, a clever word for full.Nevertheless, both senses of the word appear regularly in the pages of the Guardian- and just about everywhere else. Tributes, praise, and apologies are often characterized as fulsome without a hint of sarcasm or ill will. But in a book review for The Independent in which Jan Morris described the mistress of Lord Nelson as grotesque, obese and fulsome, we sense she had in mind the older meaning of the word. Having it both ways can lead to confusion. When an economics reporter for Time magazine recalls fulsome times, does he simply mean a prosperous era or is he passing judgment on an age of self-indulgent excess? As for the New York Times writer who gushed over a building with great banks of metal windows, set in a rich screen of glazed terra cotta, particularly fulsome on the second floor, exactly what he meant is anybodys guess. Unraveling the Meaning of Raveling If the verb  unravel means to unknot, unscramble, or untangle, its only logical to assume that ravel must mean the opposite- to tangle or complicate. Right?Well, yes and no. You see, ravel is both an antonym and a synonym for unravel. Derived from the Dutch word for a loose thread, ravel can mean either to tangle or untangle, to complicate or clarify. That makes ravel an example of a Janus word- a word (like sanction or wear) that has opposite or contradictory meanings.And that probably helps to explain why ravel is so rarely used: you never know if its coming together or falling apart. Perusing a New Janus Word Another Janus word is the verb  peruse. Since the Middle Ages, peruse has meant to read or examine, usually with great care: perusing a document means studying it carefully. Then a funny thing happened. Some people starting using peruse as a synonym for skim or scan or read quickly- the opposite of its traditional meaning. Most editors still reject this novel usage, dismissing it (in Henry Fowlers phrase) as a slipshod extension- that is, stretching a word beyond its conventional meanings.But keep an eye on your dictionary, for as weve seen, this is one of the ways in which language changes. If enough people continue to stretch the meaning of peruse, the inverted definition may eventually supplant the traditional one. A Plethora of Piatas In this scene from the 1986 film  ¡Three Amigos!,  the villainous character El Guapo is talking with Jefe, his right-hand man: Jefe: I have put many beautiful pià ±atas in the storeroom, each of them filled with little surprises.El Guapo: Many pià ±atas?Jefe: Oh yes, many!El Guapo: Would you say I have a plethora of pià ±atas?Jefe: A what?El Guapo: A plethora.Jefe: Oh yes, you have a plethora.El Guapo: Jefe, what is a plethora?Jefe: Why, El Guapo?El Guapo: Well, you told me I have a plethora. And I just would like to know if you know what a plethora is. I would not like to think that a person would tell someone he has a plethora, and then find out that that person has no idea what it means to have a plethora.Jefe: Forgive me, El Guapo. I know that I, Jefe, do not have your superior intellect and education. But could it be that once again, you are angry at something else, and are looking to take it out on me?(Tony Plana and Alfonso Arau as Jefe and El Guapo in  ¡Three Amigos!, 1986) Regardless of his motive, El Guapo asks a fair question: just what is a plethora? As it turns out, this Greek and Latin hand-me-down is an example of a word that has undergone amelioration- that is, an upgrade in meaning from a negative sense to a neutral or favorable connotation. At one time plethora meant an overabundance or unhealthy excess of something (too many pià ±atas). Now its commonly used as a non-judgmental synonym for a large quantity (a lot of pià ±atas).

Interest in Vanguard Accelerated Development Program Personal Statement

Interest in Vanguard Accelerated Development Program - Personal Statement Example only to get an understanding of Vanguard’s leadership philosophy but also to continue its pursuit of excellence within the financial services industry. Although I am relatively new to the Vanguard Investment Services, but I have had the opportunity to demonstrate my ability to learn, adapt, and communicate effectively with clients. At present, I am working as a Corporate Staff Accountant at Education Corporation of America (ECA) where some of my job responsibilities include performing account reconciliations, preparing monthly financial statements, and reviewing the accounting reports. I have also worked as a Human Resource Recruiter at Abae Personnel Services Inc. Both of these jobs have helped me gain valuable experience that I require to progress in my professional life. I want to have an excellent professional record, which could help me attain the heights of success in my life. I am willing to do whatever it takes to make it. An important point, which I want to mention, is that relocation is not an issue for me when it comes to advancing in my career. I am sending this statement of purpose to get an opportunity to join the Vanguard Accelerated Development Program and maximize my skill set, experiences and knowledge. I am hopeful of getting an interview

Is One Experience Enough Essay Example | Topics and Well Written Essays - 1000 words

Is One Experience Enough - Essay Example The American population is a mixture of different people from all over the world, the country thus enjoys a rich cultural background, thus capable of accommodating any other new citizen as the essay below posits. The U. S is among the countries with one of the most liberal structures in the world. The county has a vigilant civil group that monitors and criticizes the activities of the government with the view of creating a constitutional environment. This way, the pressure groups ensure that the country maintains a high level of constitutionalism and the government respects and safeguards the interests and rights of every citizen. The American constitution protects the rights of every citizen from whichever background. The country is among the first countries to protect the rights and privileges of the gays and lesbians. The controversial move to embrace the sexually misconstrued group sought to offer a liberal society in which everyone enjoys a degree of freedom regardless of their sexual orientations. Several nations globally do not recognize the group, in fact some countries both in the developed and developing economies still shuns the rare sexual connotations thus compelling the homosexuals to live in fear and secrecy. With the view of respecting and protecting human integrity, the American government through its vigilant citizenship and dynamic constitutionalism sought to incorporate the rights and privileges of every citizen including the homosexuals. Currently, the country is a safe haven for thousands of homosexuals from different countries through out of such countries due to the unnatural nature of their sexual orientation. The American society does not consider the sexuality among other personal issues of an individual; people in the society interact on personal levels without the investigation of private issues. This way, the American

Security Policy ATM

Security Policy ATM The purpose of this document is to define a security policy for Bank H. This policy covers. This comprehensive policy is intended to cover all aspects of information security relating to Bank H ATM machines including: installation, maintenance, and operation ATM machines and network, employee responsibilities, ramifications for customers, and the security of ATM transactions. This document is divided into three sections, each covering a key facet of information security: Organizational Policy Issue-Specific Policy System Specific Policy Organizational Policy Information security is a prime concern at Bank H. much of our information is critical in nature and must be protected not only for our own sake, but for our customers and to comply with government regulations. This makes it the responsibility of every employee of Bank H to comply with the policies established in these policies. Program Responsibility The Chief Information Security Officer has the prime responsibility for establishing and enforcing the procedures necessary for the protection of information. This person reports directly to the Chief Executive Officer and Board of Directors. A security oversight committee will also be formed consisting of the Chief Information Officer, Chief Financial Office, Chief Information Security Officer and other representatives as seen fit. This committee will meet at least quarterly to review security procedures and recommend appropriate updates. The Chief Information Security Office will be responsible for the establishment, implementation, and enforcement of information security policies on a day to day basis. Enforcement All employees of Bank H are required to adhere to the policies contained in this document. Any infringements of this policy will result in disciplinary action up to an including termination and legal action. Each employee will be required to review and sign a document indicating that he or she has reviewed and understood these policies upon hire and as part of the annual employee review process. Any employee who suspects a breach of these policies is required to immediately report the breach to his or her direct supervisor. If that is not possible, then the employee may contact the office of the Chief Information Security Officer directly. Failure to report breaches may result in disciplinary action as specified under these policies. Government Regulations The mandate for a comprehensive information security policy comes from many sources. Of foremost importance is Bank Hs concern for it employees, customers, and information assets. Additionally, due diligence is required by many overseeing government agencies. Title 12, chapter II of the Code of Federal Regulations from the Federal Reserve Board defines security policies that must be followed by banks to ensure compliance with the Bank Secrecy Act and the Bank Security Act (Regulation H: Membership of State Banking Institutions in the Federal Reserve System). Part 326 of the Federal Deposit Insurance Corporation also details minimum security requirements for banks including: Designation of a security officer Implementation of a security program Annual reporting requirements (Part 326—Minimum Security Devices and Procedures and Bank Secrecy Act) Therefore, a main goal of this document is to establish and define a security program that meets the requirements of these and other regulatory agencies. Issue-Specific Policy The key issues that arise when considering our overall information security plan involve protecting our customers, employees, and assets. Three additional issues that must be considered are risk management, disaster recovery, and training, which all work together to support our overall goals for establishing these policies. Protecting Our Customers Whereas ATM machines provide a valuable service to our customers, it is incumbent upon Bank H to take all reasonable steps to insure the security and safety of their assets, personal information, and physical security while they are conducting transactions at a Bank H ATM machine. Regulations in the USA Patriot Act place specific requirements on banks regarding the information that customers must provide in order to open and account (Office of Thrift Supervision Staff Summary of USA Patriot Act.). Furthermore, the Sarbanes-Oxley Act of 2002 places certain legal requirements on Bank H regarding the protection of sensitive information customer information (Public Law 107-204 107th Congress). Procedures below will detail necessary practices for protecting our customers including: ATM location and physical environment Authentication and verification of identity Protection of private customer information Protecting Our Employees In a real sense, establishing good security policies will protect our employees and help to insulate them from the daily risks of dealing high volumes of money and sensitive information. By clearly outlining security policies and procedures, all employees will have clear guidelines to follow to protect themselves and the assets they come into contact with. Clearly defined control procedures protect both our assets and our employees from accidental or intentional loss. A clearly defined security policy also establishes a legal standard of informed consent which is a judicial requirement that has been established by legal precedent. This document will establish procedures specific to our employees and their interactions with ATMs including: Contact with sensitive information Contact with money and other cash instruments Access to ATM equipment Protecting Our Assets Information, like money, is a valuable asset that must be protected from theft, destruction, and unauthorized access. ATMs represent a unique exposure to risk since they are often installed in locations that are outside the physical perimeter of the banks facilities. Extra precautions must be taken to protect external ATMs and ATMS located at other facilities since they will often be unattended. This policy will establish procedures to protect ATMs including: ATM Locations Environmental guidelines Minimum hardware security issues Data transmission, storage and encryption Risk Management Risk management is one of the first lines of defense in the effort to protect our customers, employees, and assets. Although the details of risk management fall outside the scope of this document, basic risk protection guidelines will be established by the Security Oversight Commission and a senior representative from risk management will be on that committee. In general, it is important that all reasonable steps will be taken to insure the company and customer assets including: FDIC insurance covering customer deposits Applicable insurance to protect ATM equipment Applicable liability coverage Disaster Recovery The ability to recover from natural and man-made disasters is an essential component of any security program. It is not the intent of the policy to create a comprehensive disaster recovery plan for the company. However, issues related to disaster recovery will be covered as applicable to ATMs including: Recovery of information and assets from equipment involved in an accident or disaster that renders the equipment inaccessible or damages or destroys the equipment Planning to mitigate the loss caused by such events Restoration of service, where applicable Training and Awareness All employees are required to attend security awareness training sessions to be coordinated and conducted by the Chief Information Security Officer a minimum of once a year. These sessions will be designed to educate employees of their responsibilities. Topics will include: Education on new and existing policies and procedures Practical training on tools and technology Awareness training on risks and mitigation System Specific Policy Special consideration must be used in protecting the systems that support our ATMs and data networks. As technology changes, so will the challenges and tools available for the security of these systems. Therefore, these policies should be reviewed on a quarterly basis and updated as necessary. ATM Machines ATMs form the core systems covered by these policies. Since many ATMs are outside the physical protection of our facilities, special care must be taken to protect them. Policies must be implemented to deal with these unique systems including: Money control procedures Technology to monitor ATMs against tampering and abuse Best-practices for installation and maintenance of ATMs Networks Data networks are necessary components of an ATM system and in some cases the most vulnerable. Therefore, all due care must be taken to insure the integrity, reliability, and security of our networks. Policies must be established regarding: Network installation and maintenance Network monitoring Network protocols and standards The use of encryption Section 2 Security Systems As the field of information security has matured, several recognized standards have evolved. Following these standards help to insure the development of comprehensive and effective security policies. A key concept in information protection is the concept of security systems. Security systems are domains of protection that establish the best practices. Our policies will be developed to cover each of these domains as appropriate. Confidentiality Confidentiality protects information from disclosure or exposure to unauthorized agents. Confidential information must be clearly indentified and reasonable steps must be taken to maintain its confidentiality. The following policies relate to confidentiality in the context of Bank H ATM security: Information will be classification so that confidential information can be identified and protected. Measures will be taken to protect confidential information in both physical and electronic form. The confidentiality of customer information is of prime importance. The confidentiality of personal employee information will also be protected. Integrity Integrity insures that information is kept in its original state and does not become corrupted at any point in the system. Systems must be implemented to protect assets from both intentional and unintentional corruption. The following policies relate to integrity in the context of Bank H ATM security: Error-checking data protocols will be used to insure the integrity of information in electronic form. Proper control procedures will be used in the handling and transport of information in physical media. Backup and archival policies will be constructed so that information may be re-created in the event of loss. All hardware and software will be maintained to insure the highest level of integrity when working with our data. Availability In order to be useful, assets must be available to those authorized to access. Some security risks are designed to block access to information and other assets. Policies that support availability include: Systems connected to external networks will have software and hardware to protect them against denial of service attacks. Disaster recovery plans will be developed and tested to insure the quick recovery of operations in the event of a disaster. ATMs will be located in areas that are accessible and convenient while appropriate measures are taken to secure them. Access control One of the first lines of defense is to limit access to an asset to authorized personnel only. This starts with locking the door and may include other devices and techniques to control access. Examples of access control include: Locked areas will be used as appropriate and policies will be developed to manage keys and access codes. The use of automated access cards or key-code locks will be used as appropriate to limit access to authorized personnel. The use of usernames, passwords, and other methods will be used to limit computer system access. Keys, codes, and other information relating to access to ATMs will be closely managed. Non-repudiation Accountability is the final key to a good security system. A clear and authentic trail of ownership and access to information and other assets must be established and maintained at all times. Examples of policies designed to enforce non-repudiation are: Fingerprints will be used to irrefutabley identify parties, as appropriate, when dealing with information in physical media. Digital certificates and digital signatures will be used to add irrefutable identification to electronic information as appropriate. Section 3 Standards The following standards have been established as minimum set of requrements that must be met in order to insure our security and protection of our assets. Compliance with these standards in mandatory at all levels. Any exceptions must be cleared in writing by the Chief Information Security Officer with the agreement of the Security Oversight Committee. Employees Before hire, all employees will sign a release document authorizing the company to perform or contract with a third party to perform a background investigation. Employees will be required to present a verified set of fingerprints which will be sent to appropriate law enforcement agencies for a criminal background check. Potential candidates who do not pass such background checks or fail to submit to them will not be considered for employment. All employees, upon hire, will be required to review and sign the following documents: A non-disclosure agreement stating that they will not disclose company information to third parties. An information confidentiality policy describing the banks information classification system and the handling of information at each level. A privacy statement informing the employee that their personal information will be held as company confidential and will not be released to third parties except as required by law. An accepted use of company resourced policy which clearly explains that all company equipment and resources, including information and service, are wholly owned by Bank H. Employees may not use any company equipment or resources for personal use. Upon hire, each employee will be issued a photo id card. This card must be displayed at all times while on company premises. When an employee leaves the company for any reason, the following procedures are to be followed: Whether the termination was for voluntary or involuntary reasons, employees will not be allowed to stay on the premises. The standard 2 week notice will be foregone and the employee will be expected to depart the premises on the same day. Any compensation due will be determined by human resource policy. Before leaving the premises, employees will conduct an exit interview. During this time the employee will reveal or return any access instruments that are outstanding in their file. Access to all computer systems or any other system that was granted to the employee will be immediately removed. Customers A valid government ID and social security card must be presented by all bank customers before an account of any kind can be opened. Copies of these documents will be made and kept on file in a secure manner. Potential customers must be cleared using industry appropriate services to insure that they are free and clear form obligations to other financial institutions before they will be allowed to establish and account. Each customer will be issued a secret Personal Identification Number (PIN) at the time they open an account. The PIN must be created using a system either randomly generates a PIN that is only known to the customer or allows the customer to enter the PIN without the revealing it to the bank employees. PINs will be immediately encrypted. At not time will a PIN be stored or transmitted in an unencrypted form. ATM cards will clearly show the full name of the customer, their card number, and a clear expiration date. ATM cards and any corresponding PIN shall not be mailed or otherwise transmitted within the same document or package. Upon closing their account, customers will return any ATM Cards in their possession. All ATM cards will be immediately disabled. Customers will be required to read and sign a document that explains their obligations for ensuring the security of their ATM cards and transactions. At a minimum, customers must agree to: Take reasonable steps to ensure that the ATM card issued to them is kept secure Notify the bank as soon as they believe that an ATM card has been lost or stolen Not let anyone else user their ATM card Not reveal their PIN to anyone else Notify the bank if their PIN has become compromised. Non customers wishing to conduct business with the bank will be required to show a valid government issued ID and must leave a fingerprint on file, preferably on the document being transacted. Employee and customer areas will be clearly marked. Customer will not be allowed in employee areas. Physical Security All company facilities shall be secured, at a minimum by doors with manual locks. Doors shall remain locked during non-business hours and at any time the facility is not occupied. A log must be kept of keys, the number of copies that have been made, and who the keys have been distributed to. Records must also be kept of keys that are reported as lost and who was reported to be in possession of the key at the time it was lost. A log must be kept of electronic codes and door access cards including who such instruments have been distributed to. Records must also be kept of access cards that are reported as lost and who was reported to be in possession of the key at the time it was lost. Employees must notify security as soon as they believe that a key, access card, or lock access code has been compromised. All bank facilities that hold money and similar must be secured by an alarm system. Employees should have the ability to trigger such alarms without detection. All ATMs must be secured with alarm systems that are triggered by unauthorized tampering. All alarm systems must be tied directly to local authorities or a registered alarm service that monitors the alarm status at all times. Monetary Access Appropriate control procedures and accounting procedures must be adhered to when dealing with money. Any area in which money is handled, held, or transported must be under constant video surveillance. Any monetary transactions exceeding $1000 must be verified and witness by a second employee. Any monetary transactions exceeding $10000 must be continuously observed by an employee who is at a higher level than the employee completing the transaction. The transport of money outside the bank facility must be handled by an authorized armored transport service and escorted by qualified armed personnel. Information Classification All information, whether in physical or electronic form, shall be assigned an appropriate level of classification based on its sensitivity and criticality. Data shall be assigned a minimum of three levels of classification. Public this information is neither sensitive nor critical to the company, nor is there any legal requirement to protect it. Confidential this is information that is sensitive in nature and should not be reveled to the general public. This classification is further subdivided into two categories: Company Confidential this information is sensitive information related to bank. Customer Confidential this is private information that belongs to a customer and must be protected by law. Critical information that is not necessarily (but may be) confidential, but is nevertheless critical to the successful functioning of the bank. ATM Equipment ATMs that require external access must still be secured in such a way that any access panels are not visible and cannot be easily accessed. All ATM machines must be under constant video surveillance. All networks shall be protected by a hardware-based firewall and other hardware and software deemed appropriate. The banks internal network shall not be exposed to public networks such as the Internet. All data transmitted via a network must be encrypted to prevent exposure to unauthorized tapping. Data protocols must be in place to validate that data is both transmitted and received in its original form. Data that does not pass validation should be rejected and logged. Network security software must be installed that constantly monitors the network for patterns and signs of attempted or actual unauthorized access. Activity that represents a threat must trigger an alarm to appropriate agencies and personnel. The daily stocking and removal of cash to and from an ATM shall be done in adherence to policies in section regarding the handling of cash detailed above. Each ATM shall use a PIN encryption device that encrypts and stores the information in a secure manner. Hardware must be implemented monitor, analyze, and authenticate any external source attempting to connect to the ATM. Unauthorized attempts must be logged and reported immediately to the monitoring agency. ATMs shall be connected to a monitoring system that automatically tracks the status of the ATM. The ATM should be configured with software that can log and securely transmit information about usage for external profiling to detect potential attacks. All ATMs must be under continual video surveillance as detailed in section 2.3 above. At no time will the customers PIN, account number, or other confidential information be displayed on the screen or any receipt. Networks All networks shall be protected by a hardware-based firewall and other hardware and software deemed appropriate. All data transmitted via a network must be encrypted to prevent exposure to unauthorized tapping. Section 4 Practices, Procedures and Guidelines This section defines the practices and procedures for the day to day operations of the company. These represent a set of guidelines which allow managers to perform their duties with due diligence, while also offering flexibility and adaptability for various environments and situations. Any questions about interpretation should be addressed the office of the Chief Information Security Officer. Employees Employees may, as appropriate, be issued certain instruments or information that allows them to access restricted areas or information. Upon receipt of any such instrument, the employee will sign a document verifying their receipt and agreeing to release the instrument back to the company when their job no longer requires it or upon termination. Instruments of this nature include, but are not limited to: ID Cards Access cards Access codes including usernames, passwords, Pins, and codes to electronic locks. Keys Customers Customers should read and sign a privacy notice informing them that their personal and financial information will be protected and not revealed to any third party except where required by law. Customers should be given a pamphlet that explains how to safely and securely use their ATM card online and at ATM machines. Physical Security The same procedures detailed in section 3.3 should be implemented for padlocks or other portable locking devices and keys to them. Doors that required access by more than 5 people should be considered for electronic access. Security officers should be present at all facilities that hold money and similar instruments during business hours. After hours, arrangements for surveillance and patrol should be implemented as appropriate. Prominent security cameras should be located both inside and outside all facilities that hold money or related instruments. These cameras should be linked to a system that records their images at all times. Computer Access In general, computers used for bank business should not be connected to the Internet. Computers that require connection to the Internet should not also be connected to the Banks internal network. Software that monitors and controls Internet activity should be used on computers connected to the Internet. The following guidelines should be used for password security: Passwords should be changed at a minimum of every 30 days. Passwords should not be reused. Passwords should contain a minimum of one number and one character and must be at least eight characters in length. Monetary Access Appropriate control procedures and accounting procedures must be adhered to when dealing with money. Any area in which money is handled, held, or transported must be under constant video surveillance. Any monetary transactions exceeding $1000 must be verified and witness by a second employee. Any monetary transactions exceeding $10000 must be continuously observed by an employee who is at a higher level than the employee completing the transaction. The transport of money outside the bank facility must be handled by an authorized armored transport service and escorted by qualified armed personnel. Information Classification Additional levels of information classification may be assigned as appropriate. All information that is considered confidential should be clearly labeled as such. Electronic confidential information should be stored in an encrypted form at all times. Physical media that is confidential should be secured in a locked location at all times. Information that is critical should be backed up an archived on a regular basis. ATM Equipment ATMs should be located inside of an existing bank facility when possible. ATMs should be installed in a well-lit area with open access. Keys and other devices that allow access to ATMs must be kept under tight security and are subject to regulations specified under section ATMs should be installed by authorized vendors who have been screened and are bonded. Records of all persons involved in the installation will be kept and archived. All vendors should supply documentation showing that the persons performing the installation have successfully passed a background check including a criminal background investigation. A schedule of preventive maintenance should be created to insure the correct functioning of all ATMs. Maintenance shall be performed only by qualified individuals. Records of maintenance should be kept including the date of the maintenance, what was done, and who performed the maintenance. These records shall be considered company confidential. Systems should be in place to prevent the tampering of ATMs or tampering with their information. ATMs should incorporate and audible alarm that is triggered by any sign of trouble. The ATMs internal software should be capable of sending alarms to the appropriate agency when the ATM is in need of service. ATMs should be secured to an immoveable foundation. The internal safe that contains the money should be manufactured, tested and rated for strength and resistance to attacks. Internal components should be protected in such a way that a single individual cannot gain access. This insures that at least two people are present with separate access codes and/or keys in order to gain access to the ATM. Mirrors should be installed to allow customers to see their surroundings while they are transacting at an ATM, but not allow others to see what they are doing. The keypad and screen of the ATM should be located in such a way that the customers body naturally blocks the keypad when it is being used. ATM usage should be monitored and analyzed to insure that each ATM is appropriately stocked with cash to meet customer demands. Networks The banks internal network should not be exposed to public networks such as the Internet. Data protocols should be in place to validate that data is both transmitted and received in its original form. Data that does not pass validation should be rejected and logged. Network security software should be installed that constantly monitors the network for patterns and signs of attempted or actual unauthorized access. Activity that represents a threat must trigger an alarm to appropriate agencies and personnel. Bibliography The following resources were used as reference material for the preparation of this document. Office of Thrift Supervision Staff Summary of USA Patriot Act. Department of Treasury. 20