Reference no: EM133140090
Unit 05 Security - BTEC Higher National Diploma in Computing
Identify types of security risks EMC Cloud is subject to, in its present setup and the impact, such issues would create on the business itself.
Assignment - EMC Cloud Solutions
Learning Outcome 1: Assess risks to IT security.
Learning Outcome 2: Describe IT security solutions...
Learning Outcome 3: Review mechanisms to control organisational IT security...
Learning Outcome 4: Manage organisational security
Assignment Brief
EMC Cloud Solutions is reputed as the nation's most reliable Cloud solution provider in VietNam.
A number of high profile businesses in VietNam including Esoft Metro Camps network, SME Bank VietNam and WEEFM are facilitated by EMC Cloud Solutions. EMC Cloud provides nearly 500 of its customers with SaaS, PaaS & IaaS solutions with high capacity compute and storage options. Also EMC is a selected contractor for VietNam, The Ministry of Defense for hosting government and defense systems.
EMC's central data center facility is located at VietNam along with its corporate head-office in Hanoi. Their premises at Hanoi is a six story building with the 1st floor dedicated to sales and customer services equipped with public wifi facility. Second-floor hosts HR, Finance and Training & Development departments and the third-floor hosts boardroom and offices for senior executives along with the IT and Data center department. Floor 4,5,6 hosts computer servers which make up the data center.
With the rapid growth of information technology in Ho Chi Minh city (HCMC) in recent years, EMC seeks opportunity to extend its services to HCMC. As of yet, the organization still considers the nature of such extension with what to implement, where is the suitable location and other essential options such as security are actually being discussed.
You are hired by the management of EMC Solutions as a Security Expert to evaluate the security-related specifics of its present system and provide recommendations on security and reliability related improvements of its present system as well as to plan the establishment of the extension on a solid security foundation.
Activity 01
Assuming the role of External Security Consultant, you need to compile a report focusing on following elements to the board of EMC Cloud Solutions;
1.1 Identify types of security risks EMC Cloud is subject to, in its present setup and the impact, such issues would create on the business itself. Explain, vulnerabilities, assets, risk - risk for thecompany with impact toEMC
1.2 Develop and describe security procedures for EMC Cloud to minimize the impact of issuesdiscussed in section (1.1) by assessing and treating the risks. - procedure for identified risks (name the procedure and explainthat)
*M - Risk management and treatment and explain risk management process.
Activity 02
2.1 Discuss how EMC Cloud and its clients will be impacted by improper/ incorrect configurationswhich are applicable to firewalls and VPN solutions. - Discuss how improper or incorrect firewall configurations, improper or incorrect VPN connections, improper firewall or VPN policies will affect the security (client) of theEMC.
2.2 Explain how following technologies would benefit EMC Cloud and its Clients by facilitatinga ‘trusted network'. (Support your answer with suitableillustrations).
i) DMZ - explain with illustration and impact of this three technologies toEMC
ii) Static IP - explain with illustration and impact of this three technologies to EMC -AlsoDHCP
iii)NAT- explain with illustration and impact of this three technologies toEMC
How DMZ, NAT, Static IPs helps to a trusted network should be explained
2.3 Discuss the benefits of implementing network monitoring systems.
* Explain about SNMP/Syslog/ NetFlow/ CDP/ Explain about tools use to network monitor.
* Benefits of network monitoring (three or more than that)
Activity 03
3.1 Formulate a suitable risk assessment procedure for EMC Cloud solutions to safeguard itself andits clients. (Risk Assessment procedure attach to thissection)
3.2 Explain the mandatory data protection laws and procedures which will be applied to datastorage solutions provided by EMC Cloud. You may also highlight on ISO 31000 risk management methodology.
• Explain about data protection laws and regulations that can be related toEMC
• Explain about ISO 31000standard
3.3 Comment on the topic, ‘IT Security & OrganizationalPolicy'
Explain how IT security of the organization should be align to the organization policy. (Ex- password policy/ email policy/ IT security policyetc....)
Discuss the impact of anymisalignment.
Activity 04
4.1 Develop a security policy for EMC Cloud to minimize exploitations and misuses whileevaluating the suitability of the tools used in an organizationalpolicy.
4.2 Develop and present a disaster recovery plan for EMC Cloud for its all venues to ensure maximum uptime for its customers (Student should produce a PowerPoint-based presentation which illustratesthe recovery plan within 15 minutes of time including justifications and reasons for decisions and options used).
4.3 ‘Creditors, directors, employees, government and its agencies, owners/shareholders, suppliers, unions, and the other parties the business draws its resources' are the main branches of any organization. Discuss the role of these groups to implement security audit recommendations for the organization.
Attachment:- Cover page-brief.rar