4
CIS 502 Technical Paper – Week 10 Assignment Risk Assessment Click Link Below To Buy: http://hwcampus.com/shop/uncategorized/cis- 502-technical-paper-week-10-assignment-risk- assessment/ Or Visit www.hwcampus.com CIS 502 Week 10 Technical Paper Technical Paper: Risk Assessment Global Finance, Inc. Internet OC193 10Gbps Remote Dial UpUsers OC193 10Gbps DMZ Border (Core) Routers Distribution Routers VPN Gateway 10Gbps RAS PBX Printers Mgmt (x3) Credit Dept Finance Accounting Worstations Printers Worstations (x5) LoanDept WorstationsPrinters 10Gbps 10 Gbps 10 Gbps Oracle 9i DB Server 10 Gbps

CIS 502 Technical Paper-Week 10 Assignment Risk Assessment

Embed Size (px)

DESCRIPTION

CIS 502 Technical Paper – Week 10 Assignment Risk AssessmentClick Link Below To Buy: http://hwcampus.com/shop/uncategorized/cis-502-technical-paper-week-10-assignment-risk-assessment/ Or Visit www.hwcampus.comCIS 502 Week 10 Technical PaperTechnical Paper: Risk Assessment Global Finance, Inc.Internet OC193 10GbpsRemote Dial UpUsersOC193 10GbpsDMZBorder (Core) RoutersDistribution RoutersVPN Gateway10GbpsRASPBXPrinters Mgmt (x3)Credit DeptFinanceAccounting Worstations PrintersWorstations (x5)LoanDept WorstationsPrinters10Gbps10 Gbps10 GbpsOracle 9i DB Server10 GbpsAccess Layer VLAN Switch10 Gbps10 GbpsExchange 2000 EmailWorstations (x10)Printers(x3)Worstations (x49) Printers(x25)Customer Services Worstations(x12)(x5)Printers (x3)SUS Server(x5)(x63)(x7)Off-Site Office VPN GatewayPSTNIntranet Web ServerInternal DNSFile and Print ServerWorkstations (x7)100MbpsTrusted Computing Base Internal NetworkGlobal Finance, Inc. Network DiagramAbove is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this past year and acquired many network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its network security has not kept up with the company growth.GFI’s network is fairly stabilized as it has not experienced many outages due to network failures. GFI has hired three (3) network engineers to keep up with the network growth and the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above diagram of a secure and risk-mitigating model in which you:1. Describe the company network, interconnection, and communication environment.2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will decide what to mitigate based on your risk assessment. Your risk assessment must be comprehensive for the organization to make data-driven decisions.a. Describe and defend your assumptions as there is no further information from this company. The company does not wish to release any security-related information per company policy.b. Assess security vulnerabilities, including the possibility of faulty network design, and recommend mitigation procedures for each vulnerability.c. Justify your cryptography recommendations based on data-driven decision making and objective opinions.3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a combination of these.4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resour

Citation preview

CIS 502 Technical Paper Week 10 AssignmentRisk AssessmentClick Link Below To Buy:http://hwcamps!c"m/sh"p/ncateg"ri#e$/cis%502%technical%paper%week%10%assignment%risk%assessment/ Or Visit www.hwcampus.comCIS 502 Week 10 Technical PaperTechnical Paper: Risk Assessment &l"'al (inance) Inc!Internet*C1+, 10&'psRem"te -ial .p.sers*C1+, 10&'ps-/01"r$er 2C"re3 R"ters-istri'ti"n R"ters4P5 &atewa610&'psRASP17Printers /gmt 28,3Cre$it -ept(inanceAcc"nting W"rstati"ns PrintersW"rstati"ns 28539"an-ept W"rstati"nsPrinters10&'ps10 &'ps10 &'ps*racle +i -1 Ser:er10 &'psAccess 9a6er 49A5 Switch10 &'ps10 &'ps;8change 2000 ;mailW"rstati"ns 28103Printers28,3W"rstati"ns 28