Reference no: EM13462459

You are the Information Security Officer for a small pharmacy that has recently been opened in the local shopping mall. The daily operation of a pharmacy is a unique business that requires a combination of both physical and logical access controls to protect medication and funds maintained located on the premises and personally identifiable information and protected health information of your customers. Your supervisor has tasked you with identifying inherent risks associated with this pharmacy and establishing physical and logical access control methods that will mitigate the risks identified.

• Firewall
• Windows 2008 Active Directory Domain Controllers (DC)
• File Server
• Desktop computers
• Dedicated T1 Connection

Write a ten to fifteen (10-15) page paper in which you:

• Identify and analyze any potential physical vulnerabilities and threats that require consideration.
• Identify and analyze any potential logical vulnerabilities and threats that require consideration.
• Illustrate in writing the potential impact of all identified physical vulnerabilities and threats to the network and the pharmacy.
• Identify all potential vulnerabilities that may exist in the documented network.
• Illustrate in writing the potential impact of all identified logical vulnerabilities to the network and the pharmacy.
• For each physical vulnerability and threat identified, choose a strategy for dealing with the risk (i.e., risk mitigation, risk assignment, risk acceptance, or risk avoidance).
• For each logical vulnerability and threat identified, choose a strategy for dealing with the risk (i.e., risk mitigation, risk assignment, risk acceptance, or risk avoidance).
• For each physical vulnerability and threat identified, develop controls (i.e., administrative, preventative, detective, and corrective) that will be used to mitigate each risk.
• For each logical vulnerability and threat identified, develop controls (i.e., administrative, preventative, detective, and corrective) that will be used to mitigate each risk.

The specific course learning outcomes associated with this assignment are:

1. Explain the concepts of information systems security as applied to an IT infrastructure.
2. Describe how malicious attacks, threats, and vulnerabilities impact an IT infrastructure.
3. Explain the means attackers use to compromise systems and networks, and defenses used by organizations.
4. Explain the role of access controls in implementing a security policy.
5. Explain how businesses apply cryptography in maintaining information security.
6. Analyze the importance of network principles and architecture to security operations.
7. Use technology and information resources to research issues in information systems security.
8. Write clearly and concisely about network security topics using proper writing mechanics and technical style conventions.