User Account

All Pages

Is web server running iis to present main application

Assignment Help Computer Network Security
Reference no: EM131309958

Threat Management and Disaster Recovery Final Paper This is a two part assignment that will be submitted as one final paper

Part 1

I would like you to complete a limited Risk Assessment for a fictional enterprise. This analysis, of course, will require you to make lots of assumptions and guesses which need to be noted and documented in your paper. To limit the scope of the paper, I want to limit your analysis to threats to the data and servers located in a centralized server room and threats to connectivity to any wide area network (WAN) clients. You will not analyze any threats to individual workstations and desktops. What follows is a description of the server room and connectivity of those servers.

This "made-up" Enterprise is a medical practice with an Electronic Medical Record (EMR) that we will call "Medco" containing patient data.
This EMR is needed on a 24 hour basis as this is a cardiology specialty and is used in clinic rooms AND importantly, it is used by emergency physicians in the local trauma center for treatment of patients suffering from life threatening heart issues. This requires a WAN connection to be made available 24 hours a day.

The Environment

Servers

• Server 1 is Microsoft Exchange Server

• Server 2 is Domain Controller

• Server 3 is a Citrix Server (delivering applications as Thin Clients to desktops and some of the WAN clients)

• Server 4 is Web Server running IIS to present main application as web pages

• Server 5 is a Server Running Microsoft SQL Server with patient data The Servers are connected to the LAN using routers and switches.

The Servers are connected to the Internet using a single Firewall via a single connection to a single Internet Service Provider (ISP).

The Servers do connect to a WAN using this Internet connection using a VPN and the nodes on this WAN (clinics around the state) each have a single connection to an ISP in their local area.

Physically all the Servers are in a single unlocked room that has no fire suppression equipment other than the typical building sprinkler system and there are two sprinkler systems in the server room.

The servers are connected to a trunk electrical line that is not part of the medical centers emergency power system and there is no line conditioning.

For temperature control, the server room relies on the existing building HVAC system with heat exchangers located on the roof of the building. There is one air conditioning vent and one room thermostat serving the server room.

The Assignment

Using the NIST Special Publication 800-30, complete a Risk Assessment to identify potential threats for which a matching vulnerability exists in the above described environment. You can pretend that you are the Security officer in charge of this Assessment and also for your control recommendation you can make decisions from your Risk Matrix as if you were upper management.

This part of the paper should be at least 3 pages and should be no more than 5 pages not including items such as interview forms or spreadsheets.

Part II

Unfortunately, before your recommendations from your Risk Assessment (Part I) were implemented a power supply on one of the servers failed and created a fire that destroyed the server with the database and all the patient data was lost. After the disaster, the practice returned to paper patient records and management gave you the charge to rebuild the system with more safeguards and importantly a more complete plan for data backup and data restore. For the second part of this paper I would like to choose a backup strategy (tape, disk array backup, cloud backup, mirrored servers and distributed database, etc) to make recovery from any future disaster within a short time possible. I want you to fully describe your solution to backup and recovery and detail some of the particulars of why you chose that solution. This will entail giving the pros and cons of the alternatives you considered and reasons for your choice of this particular solution.

This part of the paper should be also at least 3 pages and no more than 5 pages not including any tables or figures.

You should do your own work and any reference materials explicitly cited in the paper and put in quotes if directly transcribed. The paper will be submitted online through the Turnitin assignment and will be checked for plagiarism.

Reference no: EM131309958

Questions Cloud

What distinguishes computer from typical household appliance : Describe exactly what steps you would take to back up your work after you have typed in the HelloPrinter.java program.
Distinguish between gain contingency and a loss contingency : Distinguish between a gain contingency and a loss contingency, and highlight the accounting treatment for each type of contingency.
Create a linked list structure music that contains the data : Create a linked list structure Music that contains the data fields Name, Artist, Number_of _Songs, and a pointer to the list. Create the structure with 3 members and fill in data for each member.
What is the relationship between property rights : What is the relationship between property rights, corruption, and economic progress? How important are anti corruption efforts in the effort to improve a country's level of economic development?
Is web server running iis to present main application : is Web Server running IIS to present main application as web pages? Is a Server Running Microsoft SQL Server with patient data The Servers are connected to the LAN using routers and switches?
Is it a growth company or a growth stock : A biotechnology firm is growing at a compount rate of more than 21 percent a year. The stock of this company is priced about 65 times next year earnings. is it a growth company or a growth stock?
How does the war on drugs affect families of today : 496 African American Social Justice and Civil Rights Assignment:Discuss some of the individuals portrayed in American Violet and examine the different ways in which each individual was impacted as a consequence of the raid and subsequent results of..
Discuss the role of a central bank in a country : Discuss the role of a central bank in a country, particularly in implementing monetary policy. Comment on any regulatory requirements imposed on the central bank in performing their responsibilities
Discuss five trends in the external environment : Discuss five trends in the external environment scanning process that will affect most businesses.

Reviews

Write a Review

Computer Network Security Questions & Answers

  What are the most significant threats to your data

What is cyber security, and what are some of its key concepts and what are the most significant threats to your data, and what are some of the root causes of those threats - are cyber criminals a real danger to your enterprise? Why or why not?

  What security suggestions do have to secure communication

In the attached solution I have described the problems and solutions of both mobile and server communications

  Malicious attacks and / or threats that you identified

For each of the three (3) or more malicious attacks and / or threats that you identified in Assignment 1, choose a strategy for addressing the associated risk (i.e., risk mitigation, risk assignment, risk acceptance, or risk avoidance). Explain your ..

  Which e-mail security protocols depends upon a web.

Which e-mail security protocol(s) depend(s) upon a "Web of Trust"?

  How to form the trojan integrated cirucit

How to form the trojan integrated cirucit and what are the tools are used to simulate the ciruit to our system and how to pass it as input to the clustering algorithm to get the output

  Do viruses infect hardware and executable files

Since physical security is often managed under separate responsibility from information security, risk analysis for information security does not need to address physical security.

  Mobile computing has dramatically changed how information

mobile computing has dramatically changed how information is accessed and shared. wireless networking has been an

  Which displacement produces largest number of coincidences

Use displacements of 5 and 6. Which displacement produces the largest number of coincidences? Find the key. Find the plaintext.

  Research the elements of a multilayered security plan

You need to research the elements of a multilayered security plan and to create a detailed outline. Your outline should indicate one or more general security solutions for each of the seven domains of a typical IT infrastructure

  Give opinion of most important ways that believe encryption

Give your opinion of the two most important ways that you believe encryption could assist in addressing some of the current challenges facing organizations today, and explain why these solutions are so important. Justify your answer.

  Define information security governance and management tasks

Develop a checklist of items that needs to be addressed by senior management. Define the information security governance and management tasks that senior management needs to address.

  Define the security strategies of defense in depth security

In this paper, you will define the security strategies of Defense in Depth and Layered Security along with comparing and contrasting the strategies by explaining.

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

Submit Assignment

Academics

Major Subjects

Majors

Get In Touch

whatsapp: +1-415-670-9521

Phone: +1-415-670-9521

Email: [email protected]

TERMS & POLICIES

HELP & SUPPORT

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd