CIS 502 TECHNICAL PAPER

CIS 502 WEEK 10 TECHNICAL PAPER

CIS 502 Technical Paper – Week 10 Assignment Risk Assessment

CIS 502 Week 10 Technical Paper
Technical Paper: Risk Assessment
Global Finance, Inc.
Internet OC193 10Gbps
Remote Dial UpUsers
OC193 10Gbps
DMZ
Border (Core) Routers
Distribution Routers
VPN Gateway
10Gbps
RAS
PBX
Printers Mgmt (x3)
Credit Dept
Finance
Accounting Worstations Printers
Worstations (x5)
LoanDept WorstationsPrinters
10Gbps
10 Gbps
10 Gbps
Oracle 9i DB Server
10 Gbps
Access Layer VLAN Switch
10 Gbps
10 Gbps
Exchange 2000 Email
Worstations (x10)Printers
(x3)
Worstations (x49) Printers
(x25)
Customer Services Worstations
(x12)
(x5)
Printers (x3)
SUS Server
(x5)
(x63)
(x7)
Off-Site Office VPN Gateway
PSTN
Intranet Web Server
Internal DNS
File and Print Server
Workstations (x7)
100Mbps
Trusted Computing Base Internal Network
Global Finance, Inc. Network Diagram

http://hwacer.com/Tutorial/cis-502-week-10-technical-paper/

Above is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this past year and acquired many network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its network security has not kept up with the company growth.
GFI’s network is fairly stabilized as it has not experienced many outages due to network failures. GFI has hired three (3) network engineers to keep up with the network growth and the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.
The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.
Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above diagram of a secure and risk-mitigating model in which you:
1. Describe the company network, interconnection, and communication environment.
2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will decide what to mitigate based on your risk assessment. Your risk assessment must be comprehensive for the organization to make data-driven decisions.
a. Describe and defend your assumptions as there is no further information from this company. The company does not wish to release any security-related information per company policy.
b. Assess security vulnerabilities, including the possibility of faulty network design, and recommend mitigation procedures for each vulnerability.
c. Justify your cryptography recommendations based on data-driven decision making and objective opinions.
3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a combination of these.
4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft Visio or its open source equivalent. Note: The graphically depicted solution is not included in the required page length.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
6. Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
7. Include charts or diagrams created in Excel, Visio, MS Project, or one of their equivalents such as Open Project, Dia, and OpenOffice. The completed diagrams/charts must be imported into the Word document before the paper is submitted. 
The specific course learning outcomes associated with this assignment are

• Evaluate an organization’s security policies and risk management procedures, and its ability to provide security countermeasures
• Describe the details and the importance of application security models and their implementation from a management perspective.
• Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities
• Evaluate and explain from a management perspective the industry-standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.
• Explain access control methods and attacks.
• Use technology and information resources to research issues in security management.
• Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.

CIS 502 TECHNICAL PAPER, CIS 525 Week 9 Discussion, BUSN 115 Entire Course, BUS 508 Week 9 Assignment 3,CIS 505 Week 6 Case Study 2, CIS 505 Case Study 2, CIS 505 Week 3 Assignment 2, CIS 505 Assignment 2, CIS 512 Week 9 Assignment 3, CIS 512 Assignment 3, PAD 530 Week 6 Discussion, PAD 530 Week 6 Discussion 1, PAD 530 Week 6 Discussion 2, PAD 530 Week 4 Discussion, ECO 550 Week 1 Discussion, HSA 505 Week 7 Case Study 2, HSA 505 Week 7 Discussion 2, HSA 505 Week 7 Discussion 1, HSA 505 Week 6 Discussion 2, HSA 505 Week 6 Discussion 1, HSA 505 Week 4 Case study 1, HSA 505 Case study 1, HSA 505 Week 3 Assignment 1, CIS 512 Week 7 Assignment 2, CIS 512 Week 7 Discussion, CIS 512 Week 6 Case Study 2, CIS 512 Week 6 Discussion, PAD 530 Week 7 Discussion, PAD 530 Week 7 Discussion 1, PAD 530 Week 8 Discussion ,  CIS 512 Week 5 Discussion, CIS 512 Week 4 Discussion, CIS 512 Week 3 Assignment 1, CIS 512 Week 3 Discussion, CIS 512 Week 2 Case Study 1, CIS 512 Week 2 Discussion, CIS 512 Week 1 Discussion , ECE 430 Week 2 Assignment , HSA 505 Week 7 Case Study 2, HSA 505 Case Study 2,  ECE 430 Week 1 Journal, ECE 430 Week 1 DQ,ECE 430 Week 1 Complete, ECE 430 COMPLETE CLASS, DBM 380 COMPLETE CLASS,HSA 510 Week 4 Assignment 1, HSA 510 Assignment 1, PA 571 Week 4 Midterm Exam, PA 571 COMPLETE CLASS, PA 571 Final Exam, PA 301 COMPLETE CLASS,PA 301 Case Study, PA 301 Case Study 1, PA 301 Case Study 2, PA 301 Case Study 3, PA 301 Case Study 4, PA 301 Case Study 5, PA 301 Case Study 6, CIS 246 Complete Class,HSA 510 Week 7 Discussion, HSA 510 Week 11 Discussion, HSA 510 Week 10 Discussion, HRM 600 Week 7 Course Project, HRM 600 , CIS 554 Week 5 Discussion, CIS 554 Week 5 Discussion 1, CIS 554 Week 5 Discussion 2, CIS 554 Week 5, CIS 554 Week 4 Discussion, CIS 554 Week 4 Discussion 1, CIS 554 Week 4 Discussion 2 , CIS 554 Week 3 Discussion, CIS 554 Week 3 Discussion 1, CIS 554 Week 3 Discussion 2, CIS 554 Week 2 Assignment 1, CIS 554 Assignment 1, HSA 505 Week 5 Discussion 2, HSA 505 Week 5 Discussion 1,FIN 534 Week 6 Homework Set 3, FIN 534 Homework Set 3,HSA 505 Week 4 Discussion,MKT 500 Week 8 Assignment 3, MKT 500 Assignment 3,MKT 500 Week 6 Assignment 2, MKT 500 Assignment 2,MKT 500 Week 4 Assignment 1, MKT 500 Assignment 1,CIS 554 Week 4 Assignment 2,CIS 525 Week 8 Discussion, PAD 530 Week 7 Assignment 3, PAD 530 Assignment 3, CIS 525 Week 7 Discussion,CIS 525 Week 5 Discussion,CIS 525 Week 4 Discussion,CIS 525 Week 3 Discussion,HSA 510 Week 10 Assignment 4,HSA 510 Week 9 Discussion,HSA 510 Assignment 3, ECO 550 Week 8 Discussion,  ECO 550 Week 5 Discussion, HSA 510 Week 8 Assignment 3,HSA 510 Week 7 Discussion,HSA 510 Week 6 Discussion,HSA 510 Week 5 Discussion,HSA 510 Week 4 Assignment 1,HSA 510 Week 4 Discussion,HSA 510 Week 3 Discussion,PAD 525 Week 6 Discussion Question 1,PAD 525 Week 5 Discussion Question 1,PAD 525 Week 4 Discussion Question 1, PAD 525 Week 4 Discussion Question , ECO 550 Week 7 Discussion , CIS 505 Week 5 Assignment 3, CIS 505 Assignment 3, PAD 525 Week 4 Assignment 2, PAD 525 Assignment 2, ECO 550 Week 6 Discussion, HSA 505  Week 2 Discussion, HSA 505  Week 2 , PAD 525 Week 3 Discussion Question 1,CIS 505 Week 2 Assignment 1,CIS 554 Week 3 Case Study 1,CIS 554 Week 1 Discussion,PAD 525 Week 2 Discussion Question,PAD 525 Week 2 Assignment 1,PAD 525 Week 1 Discussion, PAD 525 Week 1 Discussion 1, PAD 525 Week 1 Discussion 2, PAD 530 Week 4 Assignment 2, PAD 530 Assignment 2, HSA 510 WEEK 2 DISCUSSION,CIS 525 Week 2 Discussion Questi0n, HAS 510 Week 1 Discussion , hwacer.com , CIS 525, CIS 525 Week 1 Discussion , CIS 517, CIS , CIS 517 Week 1 Discussion , CIS 500, Cis 500 Week 1, PAD 510 Week 1 Discussion, CIS 505 Week 7 Case Study 3, CIS 505 Case Study 3 , LEG 100 WEEK 6 ASSIGNMENT,CIS 525 Week 6 Case Study 1, CIS 525 Week 4 Assignment 2, PAD 510 Assignment 4, PAD 510 Assignment 3 Position Paper, PAD 510 Assignment 2 Analyzing The Policy, PAD 510 Assignment 1, HSA 525 Week 4 Assignment 1, PAD 540 Week 4 Assignment, HSA 525 Week 4-11 Discussion Question, PAD 510 Entire Course, CIS 500 Week 1 Discussion, PAD 530 WEEK 3 Discussion 1, PAD 530 Week 2 Discussion 2, PAD 530 Week 2 Discussion 1, PAD 530 Week 1 Discussion 2, PAD 530 Week 1 Discussion 1, CIS 510 Week 3 Discussion, CIS 505 Week 7 Discussion 2 , CIS 505 Week 7 Discussion , CIS 510 Week 2 Discussion, CIS 510 Week 2 Assignment 1, CIS 510 Week 1 Discussion, HSA 525 Week 9 Discussion, HSA 525 Week 8 Discussion, HSA 525 Week 7 Discussion, HSA 525 Week 6 Discussion, HSA 525 Week 5 Discussion, HSA 525 Week 4 Discussion, HSA 525 Week 3 Discussion, HSA 525 Week 2 Discussion, PAD 525 Week 8 Discussions,PAD 525 Week 7 Discussions, HSA 525 Week 1 Discussion, CIS 500 Week 10 Term Paper, CIS 500 Week 10 Discussion, CIS 500 Week 9 Discussion, PAD 530 Week 5 Discussion , PAD 530 Week 5 Discussion 1, PAD 530 Week 5 Discussion 2, CIS 500 Week 8 Discussion, CIS 500 Week 8 Case Study 2, CIS 500 Week 7 Discussion, ECO 550 Week 9 Assignment 3, ECO 550 Assignment 3, CIS 500 Week 6 Case Study 1, CIS 500 Week 6 Case Study 1, ECO 550 Week 6 Assignment 2, ECO 550 Assignment 2 HSA 525 Week 10 Discussion, ECO 550 Week 2 Discussion , HSA 525 Assignment 3 Post Merger Analysis, CIS 510 Week 9 Discussion, ECO 550 Week 3 Assignment 1, ECO 550  Assignment 1,  HSA 505 Week 8 Discussion 1, HSA 505 Week 8 Discussion 2, CIS 510 Week 9 Assignment 4, CIS 500 Week 6 Discussion, ECO 550 Week 4 Discussion,  PAD 525 Week 7 Assignment 3, PAD 525 Week 7 , CIS 500 Week 5 Discussion, CIS 500 Week 4 Discussion, CIS 500 Week 4 Assignment 2, ACC 400 Complete Class, ACC 544 Complete Class, ACC 280 Complete class, ACC 290 Complete Course, BUS 250 Entire Course A Graded, BUS 310 All Week Discussion Questions, BUS 490 Week 4 Assignment 1, BUS 515 Final Exam, CIS 510 Week 2 Assignment 1, CMGT 554 Complete class, CIS 511 Week 1 Assignment 1, CMGT 244 Entire Course, CIS 524 All Week Discussion Questions, CMGT 554 Complete class, CIS 525 Week 10 Term Paper, ECO 410 Test Bank, ECO 415 Complete Course, ENG 125 Week 5 Final Paper, ETH 316 Complete class, FIN 419  Entire class, FIN 515 Week 6 Second Course Project, FIN 534 Midterm Exam, ECO 550 Week 3 Discussion, HCA 210  Complete class, HRM 420 Complete Course, HRM 530 Complete Assignments, MGT 431 Entire Course, MGT 437 Complete Course, MGT 500 Week 3 Assignment 1, MKT 500 Assignment 2 Part B Your Marketing Plan, PHL 458 Complete Class, PSY 322 Complete Class, PSY 390 Complete Class, HSA 510 Week 10. ECE 430 Week 2 Journal