Analyze at least three such vulnerabilities

Assignment Help Management Information Sys
Reference no: EM131191548

Technical Paper: Risk Assessment

TIME IS CST

Above (ATTACHED)is the Global Finance, Inc. (GFI) network diagram. A hypothetical company, GFI has grown rapidly this past year and implemented a number of network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company's financial status has matured and its network has expanded at a rapid pace, its overall network security posture has not kept up with the company growth.

GFI's network has historically been fairly stable, and the company has not experienced many full scale network outages. GFI has hired three (3) network engineers to keep up with the network growth, as well as the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.

The trusted computing base (TCB) internal network within the Global Finance, Inc. Network Diagram hosts the company's mission critical systems that are vital to the company's operations that also affect the overall financial situation. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system or network outages, as its cash flow and financial systems heavily depend on the network stability and availability. GFI has experienced DoS network attacks twice this year, and its Oracle database and email servers had been down for a total of one (1) week as a result. The recovery process required GFI to utilize $25,000 to restore its operations to the normal operating baseline. GFI estimated the loss from these network attacks at more than $1,000,000, as well as lost customer confidence.

Write an eight to ten (8-10) page formal risk assessment proposal in which you:

1. Describe the company network, interconnection, and communication environment.

2. Assess risk based on the GFI, Inc. network diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will utilize this risk assessment to determine what actions to take; therefore, it must be comprehensive for the business leaders to make data-driven decisions.

1. Defend your assumptions where pertinent information from the scenario isn't available.

2. Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.

3. Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.

3. Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.

4. Explain the way in which you would present your findings and assessment to the company's management and thus facilitate security buy-in and concentration.

5. Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model. Note:The graphically depicted solution is not included in the required page length.

6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

· Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

· Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

· Include charts or diagrams created in Visio or an open source alternative such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

Attachment:- global_finance_network_diagram.rar

Reference no: EM131191548

Questions Cloud

Compute the data and draw a curve of ag/q versus depth : On the basis of this plot, make a statement relative to the range within which loaded areas may be considered to act as point loads. (After Taylor, 1948.)
Design a precision full wave rectifier : Design a precision full-wave rectifier as shown in Fig.(a) to provide a voltage gain of Af = vO ⁄ vS = 50. The input voltage is vS = 0.01 sin (200πt).
Estimate the stresses at a depth of 20 m below ground : Estimate the stresses at a depth of 20 m below ground surface at each of the following locations: (0,0), (0, 15), (6,0), (6, 15), and (10,25); obtain values by both Boussinesq and Westergaard methods, and also determine the ratio of the stresses a..
What is the loss in producer surplus : Assume that Qd = 80-2P and Qs = 2P-20 and the market is in equilibrium. If the government imposes a price ceiling at $20 in this market, what is the loss in producer surplus?
Analyze at least three such vulnerabilities : Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.
Compute the depth of an excavation to cause a reduction : Given the data of Example 8.22. Instead of a load on the surface, compute the depth of an excavation to cause a reduction in stress at the bottom of the excavation of 250 kPa if p - 2 Mg/m3. The excavation plan area is shown in Fig. Ex. 8.22a.
What would you do first if you were gerald neumeier : What would you do first if you were Gerald Neumeier?-  Did Ms. Grayson deserve the credit she claimed for the favorable variances? Explain.
Estimate the compression and recompression indices : estimate the compression and recompression indices and both modified in-dices for as many of the clays of Fig. 8.8 as you can. How well do the empirical relationships agree with the laboratory data? 8-30. Do Problem
Ensure effective and reliable forecasting : To ensure effective and reliable forecasting, the following aspects must be considered External factors, contractual obligations, internal control and,ethical business practices.

Reviews

Write a Review

Management Information Sys Questions & Answers

  Question about organizational paradigmsthis paper shows

question about organizational paradigmsthis paper shows that the three organizational systems still have their place in

  Conceptual process model

How do I do this- ERD, CONCEPTUAL DATA MODEL and CONCEPTUAL PROCESS MODEL. Theatre X demands an information system in order to sell tickets for the shows

  Should information on the internet be unrestricted and why

Important information about Should information on the Internet be unrestricted - Should information on the Internet be unrestricted? Why or why not?

  Describe the security vulnerabilities of web applications

Describe the advantages and challenges of using a client / server architecture for applications in a Web environment. Give a real-world example of each environment. Describe the security vulnerabilities of Web applications, such as banking on the..

  E-commerce hosting services

Visit at least THREE web hosting sites discussed in class and compare: The range of e-commerce hosting services they offer to small businesses

  Brief description of what the assessment measures

A brief description of what the assessment measures. How accurately the assessment portrayed the writer's style and why

  Imported technologies vs domestically innovative

imported technologies vs domestically innovative technologiesdevelop and outline for my directed study project and

  Discuss what it will take to build a web architecture

Discuss what it will take to build a Web architecture, move an existing Website with minimal downtime, and provide a disaster recovery solution to ensure the site is always available

  Ids in the cloud

IDS in the Cloud-From the e-Activities, explain whether or not you believe technologies such as IDS are still relevant and useful as there is a push toward SaaS and cloud-based solutions

  What would be the prevailing mindset about it in his company

What would be the prevailing mindset about IT in his company, such that he needs to do something about it? Provide some examples of how IT may be regarded in this organization

  Advantage a database has over a spreadsheet

Research organizational benefits of using databases and DBMS's. Supplement your research with a review of your lessons. Post one advantage a database has over a spreadsheet

  Describe the data breach incident and the primary causes

Describe the data breach incident and the primary causes of the data breach. Analyze how the data breach could have been prevented with better adherence to and compliance with regulatory requirements

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd