Click the link above to submit your assignment.
Students, please view the “Submit a Clickable Rubric Assignment” in the Student Center.
Instructors, training on how to grade is within the Instructor Center.
Technical Paper: Risk Assessment
Due Week 10 and worth 160 points
Global Finance, Inc. Network Diagram
Above is the Global Finance, Inc. (GFI) network diagram. A hypothetical company, GFI has grown rapidly this past year and implemented a number of network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its overall network security posture has not kept up with the company growth.
GFI’s network has historically been fairly stable, and the company has not experienced many full scale network outages. GFI has hired three (3) network engineers to keep up with the network growth, as well as the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.
The trusted computing base (TCB) internal network within the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems that are vital to the company’s operations that also affect the overall financial situation. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system or network outages, as its cash flow and financial systems heavily depend on the network stability and availability. GFI has experienced DoS network attacks twice this year, and its Oracle database and email servers had been down for a total of one (1) week as a result. The recovery process required GFI to utilize $25,000 to restore its operations to the normal operating baseline. GFI estimated the loss from these network attacks at more than $1,000,000, as well as lost customer confidence.
Write an eight to ten (8-10) page formal risk assessment proposal in which you:
Describe the company network, interconnection, and communication environment.
Assess risk based on the GFI, Inc. network diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will utilize this risk assessment to determine what actions to take; therefore, it must be comprehensive for the business leaders to make data-driven decisions.
Defend your assumptions where pertinent information from the scenario isn’t available.
Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.
Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.
Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.
Explain the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration.
Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model. Note: The graphically depicted solution is not included in the required page length.
Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
Include charts or diagrams created in Visio or an open source alternative such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.
The specific course learning outcomes associated with this assignment are:
Evaluate an organization’s security policies and risk management procedures, and its ability to provide security countermeasures.
Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.
Explain access control methods and attacks.
Describe the details and the importance of application security models and their implementation from a management perspective.
Evaluate and explain from a management perspective the industry-standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.
Use technology and information resources to research issues in security management.
Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.
Click here to view the grading rubric for this assignment.
Grading for this assignment will be based on answer quality, logic / organization of the paper, and language and writing skills, using the following rubric.
Points: 160 Technical Paper: Risk Assessment
Criteria Unacceptable
Below 70% F Fair
70-79% C Proficient
80-89% B Exemplary
90-100% A
1. Describe the company network, interconnection, and communication environment.
Weight: 15% Did not submit or incompletely described the company network, interconnection, and communication environment. Partially described the company network, interconnection, and communication environment. Satisfactorily described the company network, interconnection, and communication environment. Thoroughly described the company network, interconnection, and communication environment.
2a. Defend your assumptions where pertinent information from the scenario isn’t available.
Weight: 5% Did not submit or incompletely defended your assumptions where pertinent information from the scenario isn’t available. Partially defended your assumptions where pertinent information from the scenario isn’t available. Satisfactorily defended your assumptions where pertinent information from the scenario isn’t available. Thoroughly defended your assumptions where pertinent information from the scenario isn’t available.
2b. Ascertain apparent security vulnerabilities, and analyze at least three (3) such vulnerabilities. Such analysis should entertain the possibility of faulty network design. Recommend mitigation processes and procedures for each of the identified vulnerabilities.
Weight: 5% Did not submit or incompletely ascertained apparent security vulnerabilities; did not submit or incompletely analyzed at least three (3) such vulnerabilities. Did not submit or incompletely entertained the possibility of faulty network design. Did not submit or incompletely recommended mitigation processes and procedures for each of the identified vulnerabilities. Partially ascertained apparent security vulnerabilities; partially analyzed at least three (3) such vulnerabilities. Partially entertained the possibility of faulty network design. Partially recommended mitigation processes and procedures for each of the identified vulnerabilities. Satisfactorily ascertained apparent security vulnerabilities; satisfactorily analyzed at least three (3) such vulnerabilities Satisfactorily entertained the possibility of faulty network design. Satisfactorily recommended mitigation processes and procedures for each of the identified vulnerabilities. Thoroughly ascertained apparent security vulnerabilities; thoroughly analyzed at least three (3) such vulnerabilities. Thoroughly entertained the possibility of faulty network design. Thoroughly recommended mitigation processes and procedures for each of the identified vulnerabilities.
2c. Justify your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.
Weight: 5% Did not submit or incompletely justified your cryptography recommendations, based on security concerns and requirements, data-driven decision making, and objective opinions. Partially justified your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions. Satisfactorily justified your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions. Thoroughly justified your cryptography recommendations, based on security concerns and requirements, data-driven decision-making, and objective opinions.
3. Examine whether your risk assessment methodology is quantitative, qualitative, or a combination of these, and discuss the main reasons why you believe that the methodology that you utilized was the most appropriate.
Weight: 20% Did not submit or incompletely examined whether your risk assessment methodology is quantitative, qualitative, or a combination of these; did not submit or incompletely discussed the main reasons why you believe that the methodology that you utilized was the most appropriate. Partially examined whether your risk assessment methodology is quantitative, qualitative, or a combination of these; partially discussed the main reasons why you believe that the methodology that you utilized was the most appropriate. Satisfactorily examined whether your risk assessment methodology is quantitative, qualitative, or a combination of these; satisfactorily discussed the main reasons why you believe that the methodology that you utilized was the most appropriate. Thoroughly examined whether your risk assessment methodology is quantitative, qualitative, or a combination of these; thoroughly discussed the main reasons why you believe that the methodology that you utilized was the most appropriate.
4. Explain the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration.
Weight: 15% Did not submit or incompletely explained the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration. Partially explained the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration. Satisfactorily explained the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration. Thoroughly explained the way in which you would present your findings and assessment to the company’s management and thus facilitate security buy-in and concentration.
5. Using Microsoft Visio or its open source equivalent, redraw the CFI diagram, depicted as a secure and risk-mitigating model.
Weight: 20% Did not submit or incompletely redrew the CFI diagram, depicted as a secure and risk-mitigating model, using Microsoft Visio or its open source equivalent. Partially redrew the CFI diagram, depicted as a secure and risk-mitigating model, using Microsoft Visio or its open source equivalent. Satisfactorily redrew the CFI diagram, depicted as a secure and risk-mitigating model, using Microsoft Visio or its open source equivalent. Thoroughly redrew the CFI diagram, depicted as a secure and risk-mitigating model, using Microsoft Visio or its open source equivalent.
6. 3 references
Weight: 5% No references provided Does not meet the required number of references; some or all references poor quality choices. Meets number of required references; all references high quality choices. Exceeds number of required references; all references high quality choices.
7. Clarity, writing mechanics, and formatting requirements
Weight: 10% More than 6 errors present 5-6 errors present 3-4 errors present 0-2 errors present
Last Completed Projects
| topic title | academic level | Writer | delivered |
|---|
Are you looking for a similar paper or any other quality academic essay? Then look no further. Our research paper writing service is what you require. Our team of experienced writers is on standby to deliver to you an original paper as per your specified instructions with zero plagiarism guaranteed. This is the perfect way you can prepare your own unique academic paper and score the grades you deserve.
Use the order calculator below and get started! Contact our live support team for any assistance or inquiry.
[order_calculator]