Analyze at least three such vulnerabilities

Assignment Help Management Information Sys
Reference no: EM131191548

Technical Paper: Risk Assessment

TIME IS CST

Above (ATTACHED)is the Global Finance, Inc. (GFI) network diagram. A hypothetical company, GFI has grown rapidly this past year and implemented a number of network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company's financial status has matured and its network has expanded at a rapid pace, its overall network security posture has not kept up with the company growth.

GFI's network has historically been fairly stable, and the company has not experienced many full scale network outages. GFI has hired three (3) network engineers to keep up with the network growth, as well as the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.

The trusted computing base (TCB) internal network within the Global Finance, Inc. Network Diagram hosts the company's mission critical systems that are vital to the company's operations that also affect the overall financial situation. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system or network outages, as its cash flow and financial systems heavily depend on the network stability and availability. GFI has experienced DoS network attacks twice this year, and its Oracle database and email servers had been down for a total of one (1) week as a result. The recovery process required GFI to utilize $25,000 to restore its operations to the normal operating baseline. GFI estimated the loss from these network attacks at more than $1,000,000, as well as lost customer confidence.

Write an eight to ten (8-10) page formal risk assessment proposal in which you:

1. Describe the company network, interconnection, and communication environment.

2. Assess risk based on the GFI, Inc. network diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will utilize this risk assessment to determine what actions to take; therefore, it must be comprehensive for the business leaders to make data-driven decisions.

1. Defend your assumptions where pertinent information from the scenario isn't available.

2. Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.

3. Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.

3. Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.

4. Explain the way in which you would present your findings and assessment to the company's management and thus facilitate security buy-in and concentration.

5. Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model. Note:The graphically depicted solution is not included in the required page length.

6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

· Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

· Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

· Include charts or diagrams created in Visio or an open source alternative such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

Attachment:- global_finance_network_diagram.rar

Reference no: EM131191548

Questions Cloud

Compute the data and draw a curve of ag/q versus depth : On the basis of this plot, make a statement relative to the range within which loaded areas may be considered to act as point loads. (After Taylor, 1948.)
Design a precision full wave rectifier : Design a precision full-wave rectifier as shown in Fig.(a) to provide a voltage gain of Af = vO ⁄ vS = 50. The input voltage is vS = 0.01 sin (200πt).
Estimate the stresses at a depth of 20 m below ground : Estimate the stresses at a depth of 20 m below ground surface at each of the following locations: (0,0), (0, 15), (6,0), (6, 15), and (10,25); obtain values by both Boussinesq and Westergaard methods, and also determine the ratio of the stresses a..
What is the loss in producer surplus : Assume that Qd = 80-2P and Qs = 2P-20 and the market is in equilibrium. If the government imposes a price ceiling at $20 in this market, what is the loss in producer surplus?
Analyze at least three such vulnerabilities : Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.
Compute the depth of an excavation to cause a reduction : Given the data of Example 8.22. Instead of a load on the surface, compute the depth of an excavation to cause a reduction in stress at the bottom of the excavation of 250 kPa if p - 2 Mg/m3. The excavation plan area is shown in Fig. Ex. 8.22a.
What would you do first if you were gerald neumeier : What would you do first if you were Gerald Neumeier?-  Did Ms. Grayson deserve the credit she claimed for the favorable variances? Explain.
Estimate the compression and recompression indices : estimate the compression and recompression indices and both modified in-dices for as many of the clays of Fig. 8.8 as you can. How well do the empirical relationships agree with the laboratory data? 8-30. Do Problem
Ensure effective and reliable forecasting : To ensure effective and reliable forecasting, the following aspects must be considered External factors, contractual obligations, internal control and,ethical business practices.

Reviews

Write a Review

Management Information Sys Questions & Answers

  Request for proposal rfp for software requirementswhat is

request for proposal rfp for software requirementswhat is included in a request for proposal rfp? how do companies use

  Plan for the specific needs of an mis project

Accurately respond to and plan for the specific needs of an MIS project. Collaborate with your classmates and professor to discuss the following points related to Enterprise Resource Planning for the Woodworker Cabinets Web site upgrade project: Fu..

  Explain function of bill of materials in production process

Explain the function of a bill of materials in the production process. Please ensure that your original response is at least 250 words and is supported with references.

  Show the importance of your selected term to the business

Prepare a no shorter than 6- page MS-Word document providing information on one of the topics relating to the database field in a business of your choice. Show the importance of your selected term to the business

  Pros and three cons of using open source softwarei have a

pros and three cons of using open source softwarei have a study question that i need some help with. can you help?

  Purpose of simulation project - solve an mrp problem

The purpose of simulation project is to provide you with an opportunity to use the POM-QM for Windows software to solve an MRP problem.

  Evaluate mobile sites and discussing security threats

Evaluate real examples of electronic and mobile commerce that have changed your experience as a consumer. Filling out this table should be easier if you relate to the different industries as a "consumer."

  Detailed brief for your organization board of directors

You are the CISO (and Incident Response manager) for this organization. Your task is to prepare a detailed brief for your organization's board of directors, describing & discussing: What happened. The impact of what happened

  Post discusses it protocols and server environments

This post discusses IT protocols and server environments and secure remote terminal access for your own remote maintenance tasks.

  Create a web page using color or an image as a background

Create a web page using color or an image as a background, add an image into the body of text, and then add colors that are compatible to the design

  What function of language did your interactions illustrate

What function of nonverbal communication did your interactions illustrate? How important was nonverbal communication in all of your computer-mediated interactions? Or, how did the lack of nonverbal communication allow you to think about a function..

  Information system hardware and softwarevisit a local

information system hardware and softwarevisit a local retail computer store. spend at least 1 hour observing the latest

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd