To purchase this material click
below link:-
For More Tutorials Click Below link:-
Technical Paper: Risk
Assessment
Global Finance, Inc.
Internet OC193 10Gbps
Remote Dial UpUsers
OC193 10Gbps
DMZ
Border (Core) Routers
Distribution Routers
VPN Gateway
10Gbps
RAS
PBX
Printers Mgmt (x3)
Credit Dept
Finance
Accounting Worstations Printers
Worstations (x5)
LoanDept WorstationsPrinters
10Gbps
10 Gbps
10 Gbps
Oracle 9i DB Server
10 Gbps
Access Layer VLAN Switch
10 Gbps
10 Gbps
Exchange 2000 Email
Worstations (x10)Printers
(x3)
Worstations (x49) Printers
(x25)
Customer Services Worstations
(x12)
(x5)
Printers (x3)
SUS Server
(x5)
(x63)
(x7)
Off-Site Office VPN Gateway
PSTN
Intranet Web Server
Internal DNS
File and Print Server
Workstations (x7)
100Mbps
Trusted Computing Base Internal Network
Global Finance, Inc. Network Diagram
Above is the Global Finance, Inc. (GFI) network
diagram. GFI has grown rapidly this past year and acquired many network devices
as displayed in the diagram. The company invested in the network and designed
it to be fault tolerant and resilient from any network failures. However, although
the company’s financial status has matured and its network has expanded at a
rapid pace, its network security has not kept up with the company growth.
GFI’s network is fairly stabilized as it has not
experienced many outages due to network failures. GFI has hired three (3)
network engineers to keep up with the network growth and the bandwidth demand
by the company employees and the clients. However, the company has not hired
any security personnel who can take care of the operational security responsibility.
The trusted computing base (TCB) internal network in
the Global Finance, Inc. Network Diagram hosts the company’s mission critical
systems without which the company’s operations and financial situation would
suffer. The Oracle database and email systems are among the most intensively
used application servers in the company. GFI cannot afford system outages
because its cash flow and financial systems heavily depend on the network
stability. GFI has experienced DOS network attacks twice this year and its
Oracle database and email servers had been down for a week. The recovery
process required GFI to use $25,000 to restore its operations back to normal.
GFI estimated the loss from these network attacks at more than $100,000
including lost customer confidence.
Write a twelve to fifteen (12-15) page formal risk
assessment proposal and redraw the above diagram of a secure and
risk-mitigating model in which you:
1. Describe the company network, interconnection, and
communication environment.
2. Assess risk based on the Global Finance, Inc.
Network Diagram scenario. Note: Your risk assessment should cover all the
necessary details for your client, GFI Inc., to understand the risk factors of
the organization and risk posture of the current environment. The company
management will decide what to mitigate based on your risk assessment. Your
risk assessment must be comprehensive for the organization to make data-driven
decisions.
a. Describe and defend your assumptions as there is no
further information from this company. The company does not wish to release any
security-related information per company policy.
b. Assess security vulnerabilities, including the
possibility of faulty network design, and recommend mitigation procedures for
each vulnerability.
c. Justify your cryptography recommendations based on
data-driven decision making and objective opinions.
3. Examine whether your risk assessment methodology is
quantitative, qualitative, hybrid, or a combination of these.
4. Use at least three (3) quality resources in this
assignment. Note: Wikipedia and similar Websites do not qualify as quality
resources.
5. Create the redrawn diagram of a secure and
risk-mitigating model using Microsoft Visio or its open source equivalent.
Note: The graphically depicted solution is not included in the required page
length.
Your assignment must follow these formatting
requirements:
Be typed, double spaced, using Times New Roman font
(size 12), with one-inch margins on all sides; citations and references must
follow APA or school-specific format. Check with your professor for any
additional instructions.
6. Include a cover page containing the title of the
assignment, the student’s name, the professor’s name, the course title, and the
date. The cover page and the reference page are not included in the required
assignment page length.
7. Include charts or diagrams created in Excel, Visio,
MS Project, or one of their equivalents such as Open Project, Dia, and
OpenOffice. The completed diagrams/charts must be imported into the Word document
before the paper is submitted.
The specific course learning outcomes
associated with this assignment are
Evaluate an organization’s security policies and risk
management procedures, and its ability to provide security countermeasures
Describe the details and the importance of application
security models and their implementation from a management perspective.
Analyze the methods of managing, controlling, and
mitigating security risks and vulnerabilities
Evaluate and explain from a management perspective the
industry-standard equipment, tools, and technologies organizations can employ
to mitigate risks and thwart both internal and external attacks.
Explain access control methods and attacks.
Use technology and information resources to research
issues in security management.
Write clearly and concisely about the theories of
security management using proper writing mechanics and technical style
conventions.
No comments:
Post a Comment