Reference no: EM133874855

Cybersecurity Risk Assessment and Strategies

Labs

Westmead Hospital is a major teaching hospital in Sydney, Australia. Opened on 10 November 1978, the 975-bed hospital forms part of the Western Sydney Local Health District, and is a teaching hospital of Sydney Medical School at the University of Sydney
Westmead Hospital offers a wide range of departments and specialized services. Some of its key departments include:
• Emergency services
• Cardiology
• Neurology
• Gastroenterology
• Intensive care
• Cancer care
• Renal and Transplant surgery
• Trauma services
• Mental health services
• Maternity Department
• Radiology Department
• Pathology Department

Westmead hospital contains the following IT departments.
Infrastructure Support - Manages the physical hardware, servers, and networks.
Help Desk/Support - Provides technical assistance to hospital staff.
Clinical Systems - Oversees electronic medical records (EMR) and clinical software.
Cybersecurity - Protects the hospital's digital infrastructure from security threats.
Data Management and Analytics - Handles medical data storage, retrieval, and analytics.
Telecommunications - Manages communication systems like phones, pagers, and telemedicine services.
Project Management - Implements new IT projects and system upgrades. The following list of employees

Lab 1:
In this lab you need to install Windows server 22 trial version as a virtual machine. To setup the virtual machine, do the following steps:

lab. You need to complete the following steps in this lab:
Setup and promote Active Directory domain service on the server (1 Mark)
Create Organizational units in active directory users and computers as shown table 1 (1 Mark)
Create all users inside these organizational units. Also, create security groups for each department and join the department users to these groups. Get online assignment help from Ph.D. experts!
Notice that all IT department has to join the administrators group, in additional to their department group (3 Marks)
Creating a roaming profile for all available users. Consider the storage is available on Windows server itself. You may use the documentations as show here (1 Mark)

Lab 2:
In this lab you need to fill-in ISO27001 documents. Westmead has decided to obtain the certificate for ISO27001. For this reason, we need to prepare some documents.
Draw a hierarchical structure for the IT department. Use table 1 to abstract the structure
Fill-in the ISO27k files. First start with File 1 "1. ISO27k ISM organization chart data.xlsx"
Then fill-in file "2. ISO27k Asset inventory.xlsm"
Then fill-in file "3. ISO27k Asset Register.xlsx".
For the "People Assets" tap, choose only the administrators
For the "Digital Assets" tap, choose only policies as shown in appendix A
Then Fill-in the file "10. ISO27k RASCI table v5.xlsx"

Lab 3:
In this lab you need to create a risk assessment report according to NIST 800-30. The following steps are needed to complete the risk assessment matrix.
Create a risk assessment matrix based on Table 4.
Create a table showing the risk value and the action needed to mitigate, avoid, prevent, or ignore. The table should like this

Install Backup services in on Windows server 2022. [screenshot for installation]
Backup the Active Directory by doing "System State, VOL) [Screenshots for back are needed]
Find out the exact time needed to complete backup the AD?
Restore the AD using the same tools. [Screenshot are needed for restoration]
Find out the exact time needed to complete restoring AD?