Homework: Security Analysis
Assume you are part of a corporate level security team and your organization has just acquired a new company. The new company will have its own information technology team reporting up through the corporate team. The company being acquired is not security savvy, so a thorough assessment will be required.
The current environment you are asked to assess includes:
1) The wireless network running WEP - employees often bring in their own access points because the reception is poor with the company access points.
2) No security monitoring or review of security logs
3) The data center has about 100 Windows® servers that are patched using Microsoft Automatic Updates.
4) The firewall is a Cisco PIX
5) The backup strategy uses Windows built-in backup application. The backup is then sent to a main server every Friday night.
6) The disaster recovery plan is to restore the server from the main backup server.
7) There are no security policies or standards.
8) Employees often bring in their own laptops to use for work because the company hardware running Windows® 98 is outdated.
Write a 3 to 5 pages analysis for the security posture of the newly purchased company and recommendations for upgrading security procedures and measures. Complete the following in your analysis:
1) Summarize the risks in the current environment, the framework used, and key risk indicators.
2) Evaluate and recommend improvements for the following:
3) Wireless environment
4) Backup and disaster recovery strategies
5) Bringing your own access point and laptop policy
6) Vulnerability assessment strategy
7) Security and network monitoring
8) Recommend hardware and software improvements.
9) Recommend security policies and standards that should be written and put into place.
10) Recommend an incident response plan that would escalate up through the corporate security team.
Format your homework according to the following formatting requirements:
(1) The answer should be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
(2) The response also includes a cover page containing the title of the homework, the student's name, the course title, and the date. The cover page is not included in the required page length.
(3) Also include a reference page. The Citations and references should follow APA format. The reference page is not included in the required page length.