Reference no: EM134000785
Assignment:
It is essential as a security expert to be able to evaluate potential risks within a security infrastructure in order to position security controls/countermeasures. The system design document (SDD) describes the high-level system design and the low-level detailed design specifications from which a system is built. As part of the security development team, this document provides the information necessary for designing and implementing a system.
Ndzovu & Sons Corporation is a retail business dealing with groceries with five departments ( Deli, Pharmacy, Produce, Dairy, and grocery) in each of its stores spread across Northern America with its headquarters in Winchester, Virginia.
Design document and the overall security architecture structure diagram for your current organization
Part 1: Security Architecture
Address the following:
1. Identify and define all hardware and software devices, and the different types of sensitive data the organization will store.
2. Explain the organization's technical requirements in compliance with all devices and services internally and externally that could be a potential target for cyberattacks.
3. Describe in-depth how the security controls and services are positioned, and how they relate to the overall systems architecture to prevent attacks.
4. Demonstrate restricting access, layering security, employing authentication, encrypting storage, and automating data security by including the full scope of policy, procedural, and technical responsibilities in the IT infrastructure.
5. Apply knowledge to effectively manage a security program.
6. Assess the effectiveness of a security program.
Part 2: System Design
Address the following:
1. Describe the design goals and considerations, and articulate threat modeling, providing a high-level overview of the security architecture.
2. Describe the security baselining and the data design associated with the system, and explain the human-machine interface and operational scenarios.
3. Design a high-level system diagram that further deconstructs into low-level detailed design specifications for each system component, including hardware, internal communications, software, system integrity controls, and external interfaces, all of which are a part of the program monitoring and control.
4. Describe the importance of secure software, and the programming practices, development processes, and methodologies that lead to secure software.