Reference no: EM133503567

Homework: Evaluate Risk Implied Within Data Assets and Related Systems in an Organization Essay

Length: 5 to 7 pages.

Instructions

In this homework, you will categorize and evaluate the internal and external risks to an organization's critical systems. As CISO of a mid-sized manufacturing company, you've been tasked to oversee a risk assessment of the below systems and technologies:

1. Remote authentication: VPN Gateway, Remote Desktop Gateway

2. Email: Hybrid on-prem Exchange and Exchange Online (O365)

3. Database servers (customer data): Hybrid on-prem and on AWS, non-internet-facing

4. Web applications (online banking): Hosted on AWS, internet-facing

5. Electronic data interchange (EDI) for purchasing, inventory management, warehousing, and shipping/receiving

6. Money movement systems that are used by the business to move its money around such as wires, ACH transfers, digital payment networks (Zelle, Venmo, PayPal), and check requests. - Hybrid on-prem and on AWS, non-internet facing.

For each of these categories, conduct research and identify the specific threat and vulnerability and, with internal content as the priority, describe the impact of malicious attacks, lack of knowledge, and accidental loss:

A. Primary threats associated with the content found on each system.

B. The most common vulnerabilities exploited by those threats in each system.

C. The overall risk each presents to the organization. Select one primary mitigation method for each area specifically to reduce the risk you have identified.