SlideShare a Scribd company logo
1 of 5
CIS 502 Week 10 Technical Paper – Strayer New
Click On The Link Below to Purchase A+ Graded Material
Instant Download
http://budapp.net/CIS-502-Week-10-Technical-Paper-Strayer-New-CIS502TP.htm
Technical Paper: Risk Assessment
Due Week 10 and worth 150 points
Global Finance, Inc.
Internet
OC193 10Gbps
Remote Dial UpUsers
OC193 10Gbps
DMZ
Border (Core) Routers
Distribution Routers
VPN Gateway
10Gbps
RAS
PBX
Printers Mgmt (x3)
Credit Dept
Finance
Accounting Worstations Printers
Worstations (x5)
LoanDept WorstationsPrinters
10Gbps
10 Gbps
10 Gbps
Oracle 9i DB Server
10 Gbps
Access Layer VLAN Switch
10 Gbps
10 Gbps
Exchange 2000 Email
Worstations (x10)Printers
(x3)
Worstations (x49) Printers
(x25)
Customer Services Worstations
(x12)
(x5)
Printers (x3)
SUS Server
(x5)
(x63)
(x7)
Off-Site Office VPN Gateway
PSTN
Intranet Web Server
Internal DNS
File and Print Server
Workstations (x7)
100Mbps
Trusted Computing Base Internal Network
Global Finance, Inc. Network Diagram
Above is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this
past year and acquired many network devices as displayed in the diagram. The company
invested in the network and designed it to be fault tolerant and resilient from any network
failures. However, although the company’s financial status has matured and its network
has expanded at a rapid pace, its network security has not kept up with the company
growth.
GFI’s network is fairly stabilized as it has not experienced many outages due to network
failures. GFI has hired three (3) network engineers to keep up with the network growth
and the bandwidth demand by the company employees and the clients. However, the
company has not hired any security personnel who can take care of the operational
security responsibility.
The trusted computing base (TCB) internal network in the Global Finance, Inc. Network
Diagram hosts the company’s mission critical systems without which the company’s
operations and financial situation would suffer. The Oracle database and email systems
are among the most intensively used application servers in the company. GFI cannot
afford system outages because its cash flow and financial systems heavily depend on the
network stability. GFI has experienced DOS network attacks twice this year and its
Oracle database and email servers had been down for a week. The recovery process
required GFI to use $25,000 to restore its operations back to normal. GFI estimated the
loss from these network attacks at more than $100,000 including lost customer
confidence.
Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the
above diagram of a secure and risk-mitigating model in which you:
1. Describe the company network, interconnection, and communication environment.
2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your
risk assessment should cover all the necessary details for your client, GFI Inc., to
understand the risk factors of the organization and risk posture of the current
environment. The company management will decide what to mitigate based on
your risk assessment. Your risk assessment must be comprehensive for the
organization to make data-driven decisions.
a. Describe and defend your assumptions as there is no further information from
this company. The company does not wish to release any security-related
information per company policy.
b. Assess security vulnerabilities, including the possibility of faulty network
design, and recommend mitigation procedures for each vulnerability.
c. Justify your cryptography recommendations based on data-driven decision
making and objective opinions.
3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid,
or a combination of these.
4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar
Websites do not qualify as quality resources.
5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft
Visio or its open source equivalent. Note: The graphically depicted solution is not
included in the required page length.
Your assignment must follow these formatting requirements:
an font (size 12), with one-inch
margins on all sides; citations and references must follow APA or school-specific format.
Check with your professor for any additional instructions.
6. Include a cover page containing the title of the assignment, the student’s
name, the professor’s name, the course title, and the date. The cover page and the
reference page are not included in the required assignment page length.
7. Include charts or diagrams created in Excel, Visio, MS Project, or one
of their equivalents such as Open Project, Dia, and OpenOffice. The completed
diagrams/charts must be imported into the Word document before the paper is
submitted. 
 The specific course learning outcomes associated with this
assignment are:
Evaluate an organization’s security policies and risk management
procedures, and its ability to provide security countermeasures.
Describe the details and the importance of application security models
and their implementation from a management perspective.
Analyze the methods of managing, controlling, and mitigating security
risks and vulnerabilities.
Evaluate and explain from a management perspective the industry-
standard equipment, tools, and technologies organizations can employ to mitigate
risks and thwart both internal and external attacks.
Explain access control methods and attacks.
Use technology and information resources to research issues in security
management.
Write clearly and concisely about the theories of security management
using proper writing mechanics and technical style conventions.

More Related Content

Viewers also liked

Eco 405 week 10 quiz strayer
Eco 405 week 10 quiz   strayerEco 405 week 10 quiz   strayer
Eco 405 week 10 quiz strayerMaryLouis2018
 
Inverse Trigonometric Functions
Inverse Trigonometric FunctionsInverse Trigonometric Functions
Inverse Trigonometric FunctionsSadiq Hussain
 
Hrm 500 week 11 discussion
Hrm 500 week 11 discussionHrm 500 week 11 discussion
Hrm 500 week 11 discussionMariaLouis2018
 
Bus 335 staffing organizations week 11 quiz
Bus 335 staffing organizations week 11 quizBus 335 staffing organizations week 11 quiz
Bus 335 staffing organizations week 11 quizMariaLouis2018
 
Pad 540 week 10 assignment 4 strayer
Pad 540 week 10 assignment 4   strayerPad 540 week 10 assignment 4   strayer
Pad 540 week 10 assignment 4 strayerMaryLouis2018
 
Eco 410 week 11 quiz strayer
Eco 410 week 11 quiz   strayerEco 410 week 11 quiz   strayer
Eco 410 week 11 quiz strayerMariaLouis2018
 

Viewers also liked (7)

Eco 405 week 10 quiz strayer
Eco 405 week 10 quiz   strayerEco 405 week 10 quiz   strayer
Eco 405 week 10 quiz strayer
 
Inverse Trigonometric Functions
Inverse Trigonometric FunctionsInverse Trigonometric Functions
Inverse Trigonometric Functions
 
Hrm 500 week 11 discussion
Hrm 500 week 11 discussionHrm 500 week 11 discussion
Hrm 500 week 11 discussion
 
Bus 335 staffing organizations week 11 quiz
Bus 335 staffing organizations week 11 quizBus 335 staffing organizations week 11 quiz
Bus 335 staffing organizations week 11 quiz
 
Bus 365 week 11 quiz
Bus 365 week 11 quizBus 365 week 11 quiz
Bus 365 week 11 quiz
 
Pad 540 week 10 assignment 4 strayer
Pad 540 week 10 assignment 4   strayerPad 540 week 10 assignment 4   strayer
Pad 540 week 10 assignment 4 strayer
 
Eco 410 week 11 quiz strayer
Eco 410 week 11 quiz   strayerEco 410 week 11 quiz   strayer
Eco 410 week 11 quiz strayer
 

Similar to GFI Network Risk Assessment

Cis 532 week 2 assignment 1 – strayer new
Cis 532 week 2 assignment 1 – strayer newCis 532 week 2 assignment 1 – strayer new
Cis 532 week 2 assignment 1 – strayer newLindaAdams2017
 
Strayer cis 413 week 10 assignment 2
Strayer cis 413 week 10 assignment 2Strayer cis 413 week 10 assignment 2
Strayer cis 413 week 10 assignment 2Bartholomee
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2shyaminfo104
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2charlesangles123
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2pavucloud08
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2ElijahEthaan
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2scottbrownnn
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2shyaminfo16
 
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docx
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docxTerm Paper Managing an IT Infrastructure AuditDue Week 10 a.docx
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docxmanningchassidy
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2lroselyn
 
erm Paper Managing an IT Infrastructure AuditDue Week 10 and wo
erm Paper Managing an IT Infrastructure AuditDue Week 10 and woerm Paper Managing an IT Infrastructure AuditDue Week 10 and wo
erm Paper Managing an IT Infrastructure AuditDue Week 10 and woeleanorabarrington
 
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docx
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docxAssignment 5 Technical Term PaperThe Technical Term Paper will in.docx
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docxrosemariebrayshaw
 
Project Deliverable 5 Infrastructure and SecurityThis assignm.docx
Project Deliverable 5 Infrastructure and SecurityThis assignm.docxProject Deliverable 5 Infrastructure and SecurityThis assignm.docx
Project Deliverable 5 Infrastructure and SecurityThis assignm.docxwoodruffeloisa
 
Stayer cis-413-week-10-assignment-2
Stayer cis-413-week-10-assignment-2Stayer cis-413-week-10-assignment-2
Stayer cis-413-week-10-assignment-2infinityend3
 

Similar to GFI Network Risk Assessment (14)

Cis 532 week 2 assignment 1 – strayer new
Cis 532 week 2 assignment 1 – strayer newCis 532 week 2 assignment 1 – strayer new
Cis 532 week 2 assignment 1 – strayer new
 
Strayer cis 413 week 10 assignment 2
Strayer cis 413 week 10 assignment 2Strayer cis 413 week 10 assignment 2
Strayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docx
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docxTerm Paper Managing an IT Infrastructure AuditDue Week 10 a.docx
Term Paper Managing an IT Infrastructure AuditDue Week 10 a.docx
 
Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2Stayer cis 413 week 10 assignment 2
Stayer cis 413 week 10 assignment 2
 
erm Paper Managing an IT Infrastructure AuditDue Week 10 and wo
erm Paper Managing an IT Infrastructure AuditDue Week 10 and woerm Paper Managing an IT Infrastructure AuditDue Week 10 and wo
erm Paper Managing an IT Infrastructure AuditDue Week 10 and wo
 
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docx
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docxAssignment 5 Technical Term PaperThe Technical Term Paper will in.docx
Assignment 5 Technical Term PaperThe Technical Term Paper will in.docx
 
Project Deliverable 5 Infrastructure and SecurityThis assignm.docx
Project Deliverable 5 Infrastructure and SecurityThis assignm.docxProject Deliverable 5 Infrastructure and SecurityThis assignm.docx
Project Deliverable 5 Infrastructure and SecurityThis assignm.docx
 
Stayer cis-413-week-10-assignment-2
Stayer cis-413-week-10-assignment-2Stayer cis-413-week-10-assignment-2
Stayer cis-413-week-10-assignment-2
 

Recently uploaded

ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024
ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024
ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024Durkin Entertainment LLC
 
Princess Jahan's Tuition Classes, a story for entertainment
Princess Jahan's Tuition Classes, a story for entertainmentPrincess Jahan's Tuition Classes, a story for entertainment
Princess Jahan's Tuition Classes, a story for entertainmentazuremorn
 
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand Finale
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand FinaleBiswanath Byam Samiti Open Quiz 2022 by Qui9 Grand Finale
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand FinaleQui9 (Ultimate Quizzing)
 
Taken Pilot Episode Story pitch Document
Taken Pilot Episode Story pitch DocumentTaken Pilot Episode Story pitch Document
Taken Pilot Episode Story pitch Documentf4ssvxpz62
 
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Mother
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' MotherA Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Mother
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Motherget joys
 
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)What Life Would Be Like From A Different Perspective (saltyvixenstories.com)
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)Salty Vixen Stories & More
 
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...TeslaStakeHolder
 
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...Amil Baba Dawood bangali
 
Zoom In Game for ice breaking in a training
Zoom In Game for ice breaking in a trainingZoom In Game for ice breaking in a training
Zoom In Game for ice breaking in a trainingRafik ABDI
 
THE MEDIC, A STORY for entertainment.docx
THE MEDIC, A STORY for entertainment.docxTHE MEDIC, A STORY for entertainment.docx
THE MEDIC, A STORY for entertainment.docxazuremorn
 
Statement Of Intent - - Copy.documentfile
Statement Of Intent - - Copy.documentfileStatement Of Intent - - Copy.documentfile
Statement Of Intent - - Copy.documentfilef4ssvxpz62
 
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...Amil baba
 
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书zdzoqco
 
Fight Scene Storyboard (Action/Adventure Animation)
Fight Scene Storyboard (Action/Adventure Animation)Fight Scene Storyboard (Action/Adventure Animation)
Fight Scene Storyboard (Action/Adventure Animation)finlaygoodall2
 
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...Amil Baba Dawood bangali
 
Aesthetic Design Inspiration by Slidesgo.pptx
Aesthetic Design Inspiration by Slidesgo.pptxAesthetic Design Inspiration by Slidesgo.pptx
Aesthetic Design Inspiration by Slidesgo.pptxsayemalkadripial4
 

Recently uploaded (20)

S10_E02_How to Pimp Social Media 101.pptx
S10_E02_How to Pimp Social Media 101.pptxS10_E02_How to Pimp Social Media 101.pptx
S10_E02_How to Pimp Social Media 101.pptx
 
Moveable Feast_Travel-Lifestyle-Culture Quiz.pptx
Moveable Feast_Travel-Lifestyle-Culture Quiz.pptxMoveable Feast_Travel-Lifestyle-Culture Quiz.pptx
Moveable Feast_Travel-Lifestyle-Culture Quiz.pptx
 
ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024
ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024
ECOLUXE pre-ESPYS Ultimate Sports Lounge 2024
 
Princess Jahan's Tuition Classes, a story for entertainment
Princess Jahan's Tuition Classes, a story for entertainmentPrincess Jahan's Tuition Classes, a story for entertainment
Princess Jahan's Tuition Classes, a story for entertainment
 
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand Finale
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand FinaleBiswanath Byam Samiti Open Quiz 2022 by Qui9 Grand Finale
Biswanath Byam Samiti Open Quiz 2022 by Qui9 Grand Finale
 
Taken Pilot Episode Story pitch Document
Taken Pilot Episode Story pitch DocumentTaken Pilot Episode Story pitch Document
Taken Pilot Episode Story pitch Document
 
Sincerely, The Friday Club - Farewell Quiz-Finals.pptx
Sincerely, The Friday Club - Farewell Quiz-Finals.pptxSincerely, The Friday Club - Farewell Quiz-Finals.pptx
Sincerely, The Friday Club - Farewell Quiz-Finals.pptx
 
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Mother
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' MotherA Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Mother
A Spotlight on Darla Leigh Pittman Rodgers: Aaron Rodgers' Mother
 
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)What Life Would Be Like From A Different Perspective (saltyvixenstories.com)
What Life Would Be Like From A Different Perspective (saltyvixenstories.com)
 
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...
Flying Avocado Cat Cryptocurrency Created, Coded, Generated and Named by Grok...
 
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...
NO1 Certified Black magic specialist,Expert in Pakistan Amil Baba kala ilam E...
 
Zoom In Game for ice breaking in a training
Zoom In Game for ice breaking in a trainingZoom In Game for ice breaking in a training
Zoom In Game for ice breaking in a training
 
THE MEDIC, A STORY for entertainment.docx
THE MEDIC, A STORY for entertainment.docxTHE MEDIC, A STORY for entertainment.docx
THE MEDIC, A STORY for entertainment.docx
 
Statement Of Intent - - Copy.documentfile
Statement Of Intent - - Copy.documentfileStatement Of Intent - - Copy.documentfile
Statement Of Intent - - Copy.documentfile
 
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...
Uk-NO1 Amil In Karachi Best Amil In Karachi Bangali Baba In Karachi Aamil In ...
 
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书
办理滑铁卢大学毕业证成绩单|购买加拿大文凭证书
 
Fight Scene Storyboard (Action/Adventure Animation)
Fight Scene Storyboard (Action/Adventure Animation)Fight Scene Storyboard (Action/Adventure Animation)
Fight Scene Storyboard (Action/Adventure Animation)
 
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...
NO1 Certified kala ilam Expert In Peshwar Kala Jadu Specialist In Peshwar Kal...
 
Aesthetic Design Inspiration by Slidesgo.pptx
Aesthetic Design Inspiration by Slidesgo.pptxAesthetic Design Inspiration by Slidesgo.pptx
Aesthetic Design Inspiration by Slidesgo.pptx
 
S10_E06-Sincerely,The Friday Club- Prelims Farewell Quiz.pptx
S10_E06-Sincerely,The Friday Club- Prelims Farewell Quiz.pptxS10_E06-Sincerely,The Friday Club- Prelims Farewell Quiz.pptx
S10_E06-Sincerely,The Friday Club- Prelims Farewell Quiz.pptx
 

GFI Network Risk Assessment

  • 1. CIS 502 Week 10 Technical Paper – Strayer New Click On The Link Below to Purchase A+ Graded Material Instant Download http://budapp.net/CIS-502-Week-10-Technical-Paper-Strayer-New-CIS502TP.htm Technical Paper: Risk Assessment Due Week 10 and worth 150 points Global Finance, Inc. Internet OC193 10Gbps Remote Dial UpUsers OC193 10Gbps DMZ Border (Core) Routers Distribution Routers VPN Gateway 10Gbps RAS PBX Printers Mgmt (x3) Credit Dept Finance Accounting Worstations Printers Worstations (x5)
  • 2. LoanDept WorstationsPrinters 10Gbps 10 Gbps 10 Gbps Oracle 9i DB Server 10 Gbps Access Layer VLAN Switch 10 Gbps 10 Gbps Exchange 2000 Email Worstations (x10)Printers (x3) Worstations (x49) Printers (x25) Customer Services Worstations (x12) (x5) Printers (x3) SUS Server (x5) (x63) (x7) Off-Site Office VPN Gateway PSTN Intranet Web Server
  • 3. Internal DNS File and Print Server Workstations (x7) 100Mbps Trusted Computing Base Internal Network Global Finance, Inc. Network Diagram Above is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this past year and acquired many network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its network security has not kept up with the company growth. GFI’s network is fairly stabilized as it has not experienced many outages due to network failures. GFI has hired three (3) network engineers to keep up with the network growth and the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility. The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence. Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above diagram of a secure and risk-mitigating model in which you: 1. Describe the company network, interconnection, and communication environment. 2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will decide what to mitigate based on your risk assessment. Your risk assessment must be comprehensive for the organization to make data-driven decisions.
  • 4. a. Describe and defend your assumptions as there is no further information from this company. The company does not wish to release any security-related information per company policy. b. Assess security vulnerabilities, including the possibility of faulty network design, and recommend mitigation procedures for each vulnerability. c. Justify your cryptography recommendations based on data-driven decision making and objective opinions. 3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a combination of these. 4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources. 5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft Visio or its open source equivalent. Note: The graphically depicted solution is not included in the required page length. Your assignment must follow these formatting requirements: an font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions. 6. Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length. 7. Include charts or diagrams created in Excel, Visio, MS Project, or one of their equivalents such as Open Project, Dia, and OpenOffice. The completed diagrams/charts must be imported into the Word document before the paper is submitted. 
 The specific course learning outcomes associated with this assignment are: Evaluate an organization’s security policies and risk management procedures, and its ability to provide security countermeasures. Describe the details and the importance of application security models and their implementation from a management perspective. Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities. Evaluate and explain from a management perspective the industry- standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.
  • 5. Explain access control methods and attacks. Use technology and information resources to research issues in security management. Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.