Problem
Write short paper (one page per topic below (1 - 3) addressing the concerns described below. Total text minimum is three pages (one page per topic) and additionally, please list ALL your references for each question. Your main goal is to improve the current security posture!
Problem Description:
You have taken a new position as a Senior IT Security Engineer - Team Lead in a mid-size company (approximately 400 employees). At the moment, you do not know the security posture of the company. You have a traditional Enterprise Firewall and a DMZ network that contains your Web Servers, Email Servers, FTP Server, and a DNS server.
Your internal network is a high-speed switched and routed network that currently supports a Microsoft AD environment, Linux application servers, and both Windows and Linux clients. The company has not invested a lot of money in Security in the past but now there is capital money available in the budget to purchase/upgrade Security hardware appliances and software tools.
Objective:
Using concepts from the Principles of Computer Security and your research, please explain your actions for the following:
1. You want to know what is the current state. Where would you start to get an idea of the current security posture of the company? What should your analysis consist of and what are some of the items you must review?
2. What security technologies/solutions would you purchase to strengthen the overall security posture (consider both networking and security products, appliances, and tools)? What metrics are you trying to obtain?
3. Business Continuity and Disaster Recovery (DR) are important topics all businesses need to address! What recommendations would you make, in terms of network security concepts and technologies to support a High Available, DR solution (current and future needs)?