eHealth Software Solutions is a medium-sized company of 110 employees, with an impressive record for producing innovative healthcare software solutions for the health industry, including doctors' practices and small to medium sized medical clinics. It has produced software for clients in both Australia and New Zealand. eHealth also provides 24 hour helpdesk support to its customers. The software produced by eHealth allows clinics to improve productivity, reduce operation costs, optimise administrative processes and improve inventory management. eHealth is building a new office located in the outer eastern Melbourne suburb of Olinda on the outskirts of the Dandenong Ranges national park. They is going to move into their new office next month. The following is a breakdown of the 110 employees. 90 permanent onsite staff in the office including:
- 3 x Executive staff
- 6 x Administrative staff
- 81 x Customer Service & Technical Support staff provide for a 24 hours, 7 days a week coverage. 20 contract staff as follows:
- 20 x Programmers who work from home via a VPN connection to eHealths network.
Most programmers only come to office for meetings and product testing. Based on their plan, the new office network has 54 Windows 8.1 Workstations (including 50 staff PCs, 2 PCs for video conference located in the meeting rooms, and 2 products Testing PCs), and 3 Multi-function Printers (one per each floor of the three story building). Their LAN will have the GbEthernet standard running on a Windows 2012 R2 domain infrastructure. There will be two Domain Controllers running on Dual HP ProLiant DL380P Gen8 servers and a HP StoreVirtual 4730 600GB SAS Storage.
All nodes will be connected via 3 24Port Cisco 2950 switches and two Netgear XS712T 10GBEthernet 16 Ports switches. eHealth will also has an ADSL2+ broadband link to their ISP, which is OptusNet. At this stage eHealth doesn't have any wireless services on their perimeter. Their Domain Controllers servers provide required network services such as AD, DHCP, DNS, Web, FTP, SQL Database, VPN, and file storage. All eHealth staff use Microsoft Office 365 powered by the Microsoft Cloud via the Internet. They also run Microsoft Lync and Web Mail for internal communication, and access calendars, share documents, contacts, and tasks.
The 2 product testing PCs also have NetBeans and Visual Studio installed. All contract programmers always use their own home resources for their job tasks including computer and application software. The Sophos AV Enterprise anti-virus program needs to be installed to protect the eHealth network. eHealth uses the built-in Microsoft firewall features. Yesterday, John, the IT Manager walked pass the reception area in the nearly ready new premises. He saw the builder putting up a display sign next to the entrance of the building as shown the Figure below. He noticed a security concern and has asked you to complete a security risks assessment in the new premises. Figure 1In the risk assessment, you should run an IT Risk Assessment for network security in the new office environment. You must provide a Risk Assessment Report based on analysing the given information from this scenario. In this report, you must include:
- Download the RiskAssessment_Template.docx from the Project section on the LMS, andthen follow the instruction on the template to complete this report.
- Refer to all the security facts in chapter 5 of the TestOut Security+ course and Appendix A of this learning guide. If the scenario doesn't provide any security related information regarding a software product, a device, a data storage item, or a physical environment option, you will need to make assumptions first, and then run a risk assessment on it.? We suggest that you begin with explaining why the IT manager didn't like the builder's display sign which advertised the server room location publicly. ? Your report should be around 1000 words in length. Save this document as SCP_Project_PA_Task1_xxx.docx (where xxx is your student ID)