Implementation of a Secure Web Environment for a Government Agency

This paper details the decision making process and implementation of a secure, multi-site redundant web hosting environment for a large government agency. The security objectives are detailed and the implementation of both the logical and actual security models examined. The system in question has extremely high visibility, and though it does not harbor classified information there would be a potentially severe economic impact to the country in the event of a security breach.1