Categories
CIS 502 Week 10 Technical Paper Risk Assessment (2 Papers)
$10.00

CIS 502 Week 10 Technical Paper Risk Assessment (2 Papers)

This Tutorial was purchased 4 times & rated A+ by student like you.

 

This Tutorial contains following Attachments

  • CIS 502 Week 10 Technical Paper Risk Assessment.zip

This Tutorial contains 2 Papers

 

CIS 502 Week 10 Technical Paper

Technical Paper: Risk Assessment

Global Finance, Inc.

Internet OC193 10Gbps

Remote Dial UpUsers

OC193 10Gbps

DMZ

Border (Core) Routers

Distribution Routers

VPN Gateway

10Gbps

RAS

PBX

Printers Mgmt (x3)

Credit Dept

Finance

Accounting Worstations Printers

Worstations (x5)

LoanDept WorstationsPrinters

10Gbps

10 Gbps

10 Gbps

Oracle 9i DB Server

10 Gbps

Access Layer VLAN Switch

10 Gbps

10 Gbps

Exchange 2000 Email

Worstations (x10)Printers

(x3)

Worstations (x49) Printers

(x25)

Customer Services Worstations

(x12)

(x5)

Printers (x3)

SUS Server

(x5)

(x63)

(x7)

Off-Site Office VPN Gateway

PSTN

Intranet Web Server

Internal DNS

File and Print Server

Workstations (x7)

100Mbps

Trusted Computing Base Internal Network

Global Finance, Inc. Network Diagram

Above is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this past year and acquired many network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its network security has not kept up with the company growth.

GFI’s network is fairly stabilized as it has not experienced many outages due to network failures. GFI has hired three (3) network engineers to keep up with the network growth and the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.

The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.

Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above diagram of a secure and risk-mitigating model in which you:

1. Describe the company network, interconnection, and communication environment.

2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will decide what to mitigate based on your risk assessment. Your risk assessment must be comprehensive for the organization to make data-driven decisions.

a. Describe and defend your assumptions as there is no further information from this company. The company does not wish to release any security-related information per company policy.

b. Assess security vulnerabilities, including the possibility of faulty network design, and recommend mitigation procedures for each vulnerability.

c. Justify your cryptography recommendations based on data-driven decision making and objective opinions.

3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a combination of these.

4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft Visio or its open source equivalent. Note: The graphically depicted solution is not included in the required page length.

Your assignment must follow these formatting requirements:

Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

6. Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

7. Include charts or diagrams created in Excel, Visio, MS Project, or one of their equivalents such as Open Project, Dia, and OpenOffice. The completed diagrams/charts must be imported into the Word document before the paper is submitted. 
The specific course learning outcomes associated with this assignment are

 

Evaluate an organization’s security policies and risk management procedures, and its ability to provide security countermeasures

Describe the details and the importance of application security models and their implementation from a management perspective.

Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities

Evaluate and explain from a management perspective the industry-standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.

Explain access control methods and attacks.

Use technology and information resources to research issues in security management.

Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.

Write a review

Order Id


Order Id will be kept Confidential
Your Name:


Your Review:
Rating:   A   B   C   D   F  

Enter the code in the box below:



Related Tutorials
$20.00

This Tutorial was purchased 0 times & rated No rating by student like you.

CIS 502 Final Exam Guide     •           1         Two parties are exchanging messages using public key cryptography. Which of the following statements describes the proper procedure for tra..
$20.00

This Tutorial was purchased 1 times & rated No rating by student like you.

CIS 502 Midterm set 2         •           1          An organization recently underwent an audit of its financial applications. The audit report stated that there were..
$20.00

This Tutorial was purchased 0 times & rated No rating by student like you.

CIS 502 Midterm set 1         •           1         A security manager is developing a data classification policy. What elements need to be in the policy?   &..
$10.00

This Tutorial was purchased 2 times & rated A+ by student like you.

This Tutorial contains 2 Papers   CIS 502 Week 9 Assignment 3 – Strayer New   Assignment 3: Cybersecurity   Due Week 9 and worth 50 points   Cybersecurity is such an important topic today and understanding its implications is paramount in the se..
$10.00

This Tutorial was purchased 2 times & rated B+ by student like you.

This Tutorial contains 2 Papers     CIS 502 WEEK 8 CASE STUDY   Case Study: Mobile Device Security and Other Threats   Due Week 8 and worth 110 points   Read the article titled, “Mobile Devices Will Be Biggest Business Security Threat i..
$10.00

This Tutorial was purchased 2 times & rated A+ by student like you.

This Tutorial contains 2 Papers     CIS 502 Week 7 Case Study 3 – Strayer New   Case Study 3: Mobile Devices Security   Due Week 7 and worth 100 points   The use of mobile devices is prevalent and growing rapidly as users heavily depend..
$10.00

This Tutorial was purchased 3 times & rated A+ by student like you.

This Tutorial contains 2 Papers   CIS 502 WEEK 6 ASSIGNMENT 2   Assignment 2: Critical Infrastructure Protection   Due Week 6 and worth 110 points   According to the text, Critical Infrastructure Protection (CIP) is an important cybersecurity in..
$10.00

This Tutorial was purchased 2 times & rated B+ by student like you.

This Tutorial contains 2 Papers     CIS 502 Week 4 Case Study 2 – Strayer New   Case Study 2: Social Engineering Attacks and Counterintelligence   Due Week 4 and worth 100 points   Social engineering attacks and counterintelligence have..
$10.00

This Tutorial was purchased 2 times & rated A+ by student like you.

This Tutorial contains 2 Papers   CIS 502 Week 3 Case Study 1 – Strayer New   Case Study 1: Advanced Persistent Threats Against RSA Tokens   Due Week 3 and worth 100 points   Authentication breach by impersonation or password crack has been popu..
$10.00

This Tutorial was purchased 3 times & rated A+ by student like you.

This Tutorial contains 2 Papers   Assignment 1: Web Server Application Attacks   Due Week 2 and worth 110 points   It is common knowledge that Web server application attacks have become common in today’s digital information sharing age. Understanding the imp..
$45.00

This Tutorial was purchased 4 times & rated A+ by student like you.

CIS 502 Week 2 Assignment 1 Web Server Application Attacks (2 Papers) CIS 502 WEEK 6 Assignment 2: Critical Infrastructure Protection (2 Papers)   CIS 502 Week 9 Assignment 3 Cybersecurity (2 Papers)   CIS 502 Week 10 Technical Paper Risk Assessment (2 Papers) &n..