Analyze at least three such vulnerabilities

Assignment Help Management Information Sys
Reference no: EM131191548

Technical Paper: Risk Assessment

TIME IS CST

Above (ATTACHED)is the Global Finance, Inc. (GFI) network diagram. A hypothetical company, GFI has grown rapidly this past year and implemented a number of network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company's financial status has matured and its network has expanded at a rapid pace, its overall network security posture has not kept up with the company growth.

GFI's network has historically been fairly stable, and the company has not experienced many full scale network outages. GFI has hired three (3) network engineers to keep up with the network growth, as well as the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.

The trusted computing base (TCB) internal network within the Global Finance, Inc. Network Diagram hosts the company's mission critical systems that are vital to the company's operations that also affect the overall financial situation. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system or network outages, as its cash flow and financial systems heavily depend on the network stability and availability. GFI has experienced DoS network attacks twice this year, and its Oracle database and email servers had been down for a total of one (1) week as a result. The recovery process required GFI to utilize $25,000 to restore its operations to the normal operating baseline. GFI estimated the loss from these network attacks at more than $1,000,000, as well as lost customer confidence.

Write an eight to ten (8-10) page formal risk assessment proposal in which you:

1. Describe the company network, interconnection, and communication environment.

2. Assess risk based on the GFI, Inc. network diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will utilize this risk assessment to determine what actions to take; therefore, it must be comprehensive for the business leaders to make data-driven decisions.

1. Defend your assumptions where pertinent information from the scenario isn't available.

2. Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.

3. Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.

3. Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.

4. Explain the way in which you would present your findings and assessment to the company's management and thus facilitate security buy-in and concentration.

5. Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model. Note:The graphically depicted solution is not included in the required page length.

6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

· Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

· Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

· Include charts or diagrams created in Visio or an open source alternative such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

Attachment:- global_finance_network_diagram.rar

Reference no: EM131191548

Questions Cloud

Compute the data and draw a curve of ag/q versus depth : On the basis of this plot, make a statement relative to the range within which loaded areas may be considered to act as point loads. (After Taylor, 1948.)
Design a precision full wave rectifier : Design a precision full-wave rectifier as shown in Fig.(a) to provide a voltage gain of Af = vO ⁄ vS = 50. The input voltage is vS = 0.01 sin (200πt).
Estimate the stresses at a depth of 20 m below ground : Estimate the stresses at a depth of 20 m below ground surface at each of the following locations: (0,0), (0, 15), (6,0), (6, 15), and (10,25); obtain values by both Boussinesq and Westergaard methods, and also determine the ratio of the stresses a..
What is the loss in producer surplus : Assume that Qd = 80-2P and Qs = 2P-20 and the market is in equilibrium. If the government imposes a price ceiling at $20 in this market, what is the loss in producer surplus?
Analyze at least three such vulnerabilities : Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.
Compute the depth of an excavation to cause a reduction : Given the data of Example 8.22. Instead of a load on the surface, compute the depth of an excavation to cause a reduction in stress at the bottom of the excavation of 250 kPa if p - 2 Mg/m3. The excavation plan area is shown in Fig. Ex. 8.22a.
What would you do first if you were gerald neumeier : What would you do first if you were Gerald Neumeier?-  Did Ms. Grayson deserve the credit she claimed for the favorable variances? Explain.
Estimate the compression and recompression indices : estimate the compression and recompression indices and both modified in-dices for as many of the clays of Fig. 8.8 as you can. How well do the empirical relationships agree with the laboratory data? 8-30. Do Problem
Ensure effective and reliable forecasting : To ensure effective and reliable forecasting, the following aspects must be considered External factors, contractual obligations, internal control and,ethical business practices.

Reviews

Write a Review

Management Information Sys Questions & Answers

  Evaluate the challenges associated with each trend

Healthcare Reform and 21st Century Healthcare Information Systems, Analyze and evaluate the implications of 3-5 major initiatives associated with healthcare reform on the designing and planning of 21st century healthcare information systems

  E-commerce offers the promise of conducting business

E-Commerce offers the promise of conducting business on the Internet, via Web-enabled applications. This allows organizations to sell and deliver products and services to customers remotely via the Internet. However, there are security concerns, for ..

  Benefits of integrating business functional area

Enterprise Resource Planning (ERP) Technology; Sales Demand, Manufacturing and Marketing Interface. The deliverable is a two to three page paper that includes a brief summary of this material, and consideration of the following idea. Is this paper'..

  Advertisement on google or another search engine

Create a post describing any experiences you've had with online advertising (good or bad). Have you ever clicked on an advertisement on Google or another search engine

  Compare the qualitative and quantitative risk analysis

Compare and contrast qualitative risk analysis and quantitative risk analysis, and provide at least two examples identifying a situation when each would be useful.

  Do you suspect your internet speeds have been reduced

Having read the "Transcending Net Neutrality: Ten Steps Toward an Open Internet" and "SOPA and PIPA What Went Wrong" papers, write the Net Neutrality paper.

  Discuss the technology behind the system

Consider again the telemedicine system discuss the technology behind the system, and how it will be updated to keep pace with emerging technology

  Primary drivers that friedman says are flattening the world

What are the primary drivers that Friedman says are "flattening" the world? What constitutes the "Right Stuff" that Friedman believes will help individuals to do better in this increasingly "Flattened" world

  Structured explanation of sustainable mis practices

Management Information System (MIS) Practices - The response gives you a structured explanation of sustainable MIS practices

  Solve complex organisational problems theoretically

Solve complex organisational problems theoretically and practically and critically reflect on the effectiveness of management processes to real-world problems.

  Show the computer security checklist

Computer security checklist - Three major categories: preventive, detective, and corrective controls.

  Challenges to design a supply chainif you were to be tasked

challenges to design a supply chainif you were to be tasked to design a supply chain what are some of the challenges

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd