Evaluate an organization''s security policies

Assignment Help Computer Network Security
Reference no: EM13779110

Global Finance, Inc. Network Diagram

Above is the Global Finance, Inc. (GFI) network diagram. A hypothetical company, GFI has grown rapidly this past year and implemented a number of network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company's financial status has matured and its network has expanded at a rapid pace, its overall network security posture has not kept up with the company growth.

GFI's network has historically been fairly stable, and the company has not experienced many full scale network outages. GFI has hired three (3) network engineers to keep up with the network growth, as well as the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.

The trusted computing base (TCB) internal network within the Global Finance, Inc. Network Diagram hosts the company's mission critical systems that are vital to the company's operations that also affect the overall financial situation. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system or network outages, as its cash flow and financial systems heavily depend on the network stability and availability. GFI has experienced DoS network attacks twice this year, and its Oracle database and email servers had been down for a total of one (1) week as a result. The recovery process required GFI to utilize $25,000 to restore its operations to the normal operating baseline. GFI estimated the loss from these network attacks at more than $1,000,000, as well as lost customer confidence.

Write an eight to ten (8-10) page formal risk assessment proposal in which you:

Describe the company network, interconnection, and communication environment.

Assess risk based on the GFI, Inc. network diagram scenario. Note:Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will utilize this risk assessment to determine what actions to take; therefore, it must be comprehensive for the business leaders to make data-driven decisions.

Defend your assumptions where pertinent information from the scenario isn't available.

Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.

Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.

Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.

Explain the way in which you would present your findings and assessment to the company's management and thus facilitate security buy-in and concentration.

Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model. Note: The graphically depicted solution is not included in the required page length.

Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date.

The cover page and the reference page are not included in the required assignment page length.

Include charts or diagrams created in Visio or an open source alternative such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

The specific course learning outcomes associated with this assignment are:

Evaluate an organization's security policies and risk management procedures, and its ability to provide security countermeasures.

Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.

Explain access control methods and attacks.

Describe the details and the importance of application security models and their implementation from a management perspective.

Evaluate and explain from a management perspective the industry-standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.

Use technology and information resources to research issues in security management.

Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.

Reference no: EM13779110

Questions Cloud

Explaining how and why fraud invalidates a contract : Prepare a 2- to 3-page, double-spaced document explaining how and why fraud invalidates a contract. Include in your treatment of this subject examples of undue influence and duress that can arise in the business context
Generation of psychologists theory : Every generation of psychologists seems to engage in practices that the next generation looks back upon with concern and regret. Many of the former treatments for the mentally ill are now viewed as unethica
Create a flow chart that addresses : What are at least two of the major ideologies that influence education and policy making today? In what ways have the ideologies influenced your own education?
The various reimbursement methodologies : Expand on revenue cycle management by listing the steps involved in the process and the purpose of utilizing this type of management system.
Evaluate an organization''s security policies : Evaluate an organization's security policies and risk management procedures, and its ability to provide security countermeasures. Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.
Information security standards for an organization : Every organization must consider the mandatory and recommended practices when creating its information security program and/or security policies.
Budget cuts analysis : Over the last ten years, schools have had to make significant budget cuts. Teachers feel the brunt of educational budget cuts in many ways.
How multinational corporations deal with multiculturalis : Today most multinational corporations (MNC's) deal with multiculturalism within their own country of origin. Would you agree or disagree with this statement?
Operant conditioning and superstitions : Describe the principles/concepts which can be applied to explain the process by which operant conditioning can lead to the development and maintenance of superstitions.

Reviews

Write a Review

 

Computer Network Security Questions & Answers

  Describe how the national security telecommunications and

discuss how the national security telecommunications and information systems security policy nstissp national policies

  Explain protocol for sending encrypted message

Consider following protocol for sending an encrypted message from Alice to Bob in presence of Key Distribution Center (KDC).

  What encryption mechanism is used in the cquroam

What wireless security type does CQUniversity implement to enable roaming? Explain how this wireless security type work and what encryption mechanism is used in the CQURoam?  Explain  how this mechanism works

  What is relationship between hashing and digital signatures

PKI and PGP are two methods for generating and managing public keys for use in protocols such as secure email. Compare and contrast the trust models for public keys used in PKI and PGP.

  What other ways can you track and measure the performance

what other ways can you track amp measure performance of a project other than earned value measurement evm? are some

  Verify the correctness of your decryption

In a public-key system using RSA, you intercept the ciphertext C = 13 sent to a user whose public key is e = 23, n = 143. What is the plaintext M?

  Research in the area of information security awareness

1-2 page APA style paper summarizing research in the area of Information security awareness

  Network risk assessment

The key to this assignment is to demonstrate your understanding of the topics for the course, not to re-word the text or reference material. Please see Appendix A for the grading rubric on all written assignments.

  Describe the process used in restoring

Describe the process used in restoring the scrambled bits and insert plain text in the assignment - hypothetical case you are required to produce a formal report consisting of facts from your findings to your attorney who has retained you.

  Access control models

Compare and contrast access control models. Select an access control model that best prevents unauthorized access for each of the five scenarios given below

  How would an organization like anonymous

How would an organization like "Anonymous" be able to carry out phishing attacks against major organizations with relative ease

  Define encryption

In a given encryption system where the messages are expressed only as numbers and "e" is an integer.

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd