You have been consulted to develop a security model to ensure information flow integrity in a newly formed financial institute. The company has categorised its staff and objects into the following categories. Top Secret (TS), Secret (SC), Confidential (C), and Unclassified (UC) as the security/integrity clearance levels with decreasing privileges. Financial (FIN), Executive (EXE), Marketing (MAR) and Operational (OPR) as object categories. The following Table explains integrity clearances for subjects and integrity classification for objects in a company. If the company has decided to follow BLP (Bella Paduala Model) security model, draw the access permission matrix that includes all subjects and objects listed above with Read (R) and/or Write (W) permissions. begin{tabular}{ccc} hline Subject & Security Level & Category hline Top Executives & TS & FIN, EXE, OPR, MAR Finance staff & SC & FIN, OPR HR & C & OPR Sales staff & UC & MAR, OPR Operations staff & UC & OPR hline end{tabular}begin{tabular}{ccc} hline Object & Security Level & Category hline security_policy & TS & EXE,OPR payroll_db & SC & FIN,OPR employee_contract & C & OPR bank_details & C & FIN building_access_cards & C & OPR employee_funds & C & OPR, FIN product_details & UC & MAR sales_logs & UC & OPR,MAR hline end{tabular}.

1. You have been consulted to develop a security model to ensure information flow integrity in
a newly formed financial institute. The company has categorised its staff and objects into the
following categories. Top Secret (TS), Secret (SC), Confidential (C), and Unclassified (UC) as
the security/integrity clearance levels with decreasing privileges. Financial (FIN), Executive
(EXE), Marketing (MAR) and Operational (OPR) as object categories.
The following Table explains integrity clearances for subjects and integrity classification for
objects in a company.
If the company has decided to follow BLP (Bella Paduala Model) security model, draw the
access permission matrix that includes all subjects and objects listed above with Read (R)
and/or Write (W) permissions.
begin{tabular}{ccc} hline Subject & Security Level & Category hline Top Executives & TS & FIN,
EXE, OPR, MAR Finance staff & SC & FIN, OPR HR & C & OPR Sales staff & UC & MAR, OPR
Operations staff & UC & OPR hline end{tabular}begin{tabular}{ccc} hline Object & Security Level &
Category hline security_policy & TS & EXE,OPR payroll_db & SC & FIN,OPR employee_contract
& C & OPR bank_details & C & FIN building_access_cards & C & OPR employee_funds & C &
OPR, FIN product_details & UC & MAR sales_logs & UC & OPR,MAR hline end{tabular}