Proposal: Network Security

1220 Words3 Pages
bulb-icon

Recommended: Best Practices for Network Security

The organization had just secured a government contract worth millions of dollars. The sensitive nature of the information requires the company evaluate and address security measures. With any network, there are many threats, both internal and external, that can result in loss of productivity, loss of data and even theft of information. I will address several of these threats and propose measures to ensure a protected environment and to mitigate these risks.
Vulnerability Assessment
Entry to the office area is controlled by physically keyed doors. Employees work in an open cubical environment and have the ability to physically secure paperwork and personal items but not computer equipment. All computer systems run a current suite of Anti-Virus and Anti-Malware protection software and are centrally managed and updated daily from a central management system. The logical computing environment is a Microsoft Active Directory (AD) domain. Access to domain resources such as file shares and printing require a domain user account and are secured using security groups. There is a centralized server room which houses all network infrastructure equipment. Access to the server room is restricted to IT, security and facilities personnel and controlled by key and combination lock. Internet access is available and the physical entry point is in the secured server room, however, there is currently no firewall installed.
Security Recommendation
A solution that addresses physical and logical security concerns along with mitigating both internal and external threats is needed. The first possible hazard that I will address is the external security risk. This can come in an assortment of forms, the first being physical security...

... middle of paper ...

... with the latest security patches; user and computer policies and education will greatly reduce the risk of unauthorized access or infection. Implementing the recommended systems, policies and procedures will greatly enhance the security posture of this organization and reduce vulnerabilities from both internal and external threats.

Works Cited

Cisco, (2014). Cisco ASA 5500-X Series Next-Generation Firewalls. Retrieved from http://www.cisco.com/c/en/us/products/security/asa-5500-series-next-generation- firewalls/index.html
Gercek, G., & Saleem, N. (2005, July). Securing small business computer networks: An examination of primary security threats and their solution. Information Systems
Security, 14(3), 18-28.
Microsoft, (2014). Windows server update services. Retrieved from
http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx

Show More
Related

  • NT1330 Unit 3 Assignment 1: Client Server Networking

    980 Words  | 2 Pages

    The servers can be placed on a server rack which will hold the main network devices such as switches, routers and the modem as well as the firewall and the Intrusion Detection System. This room should have restricted access and only authorized personnel must have access to it, by using sophisticated keycard systems and even having additional security procedures such as biometrical readers etc. It was also proposed to get rid of Motorola SB3100 and Net Gear MR814 to increase the overall security with more advanced networking devices to provide new security features such as VLANs, access lists, and secure protocols.

    Read More

  • Securing Aim Higher College's Digital Infrastructure

    744 Words  | 2 Pages

    Also, implement patch management and keep up to date with anti-malware and anti-spyware updates. This helps in the summarization of the possible threats the College can face in certain scenarios and explains how to protect against them.

    Read More

  • Is4680 Week 2 Research Paper

    621 Words  | 2 Pages

    DWP Systems performed an outer security helplessness evaluation of ABC association. An outside appraisal takes a gander at gadgets, for example, firewalls, servers and switches that give administrations on the Internet. It likewise covers application layer appraisals on any online administrations remotely confronting. We additionally take a gander at the workstations in your association and how they are being utilized by the clients. The physical building is additionally examined for any passageways and exits. This is to guarantee that the building that is lodging the information and data is secured also.

    Read More

  • Slippery Slope Action Plan

    787 Words  | 2 Pages

    Therefore, a reassessment of the controls we have in place would be necessary. Ed’s previously mentioned tasks, when completed, will lay the foundations for our revamped security system. To supplement this, we will need to rework our security policies and create an incident response plan. This will include creation of a RACI matrix so that everyone is aware what role they play in the successful implementation of this plan. As we are storing credit card data, we should also consider being PCI DSS compliant. This would require us to conduct an audit of our current systems and run it by a checklist to make sure we are up to the required standards of PCI. Furthermore, we will need to appoint a dedicated Chief Information Security Officer whose task will be to develop the company’s long term information security program which will align with the company’s

    Read More

  • Social Engineering Attacks and Counterintelligence

    1287 Words  | 3 Pages

    ...ed on how to respond to information security breaches. Regardless of an organization size, there is always the risk of information breaches.

    Read More

  • Homeland Security: The Mission Of Homeland Security

    1035 Words  | 3 Pages

    Security helps the organization meet its business objectives or mission by protecting its physical and financial resources, reputation, legal position, employees, and other tangible and intangible assets through the selection and application of appropriate safeguards. Businesses should establish roles and responsibilities of all personnel and staff members. However, a Chief Information Officer should be appointed to direct an organization’s day to day management of information assets. Supporting roles are performed by the service providers and include systems operations, whose personnel design and operate the computer systems. Each team member must be held accountable in ensuring all of the rules and policies are being followed, as well as, understanding their roles, responsibilities and functions. Organizations information processing systems are vulnerable to many threats that can inflict various types of damage that can result in significant losses (Harris, 2014). Losses can come from actions from trusted employees that defraud the system, outside hackers, or from careless data entry. The major threat to information protection is error and omissions that data entry personnel, users, system operators and programmers make. To better protect business information resources, organizations should conduct a risk analysis to see what

    Read More

  • Software Ethics

    839 Words  | 2 Pages

    ...in order to properly secure the restricted data contained within the system. The software development team carefully explains the danger of compromised data both in the form of a technologically proficient employee along with the potentially greater and more damaging theft of data perpetrated by online hackers. Financial loss due to inadequate data storage and security is also explained to the client. The goal of this explanation is the realization that an increased preliminary investment may ultimately be significantly less expensive than a breach of an insecure system. In the event the client is unable or unwilling to modify the structure of the system, the recommended course of action is for the software development team to decline implementation of the system with consideration to the consequent damage to the repute of the software development organization.

    Read More

  • Penetration Testing

    3197 Words  | 7 Pages

    As electronic commerce, online business-to-business operations, and global connectivity have become vital components of a successful business strategy, enterprises have adopted security processes and practices to protect information assets. But if you look at today's computing environments, system security is a horrible game of numbers: there are currently over 9,223 publicly released vulnerabilities covering known security holes in a massive range of applications from popular Operating Systems through to obscure and relatively unknown web applications. [01] Over 300 new vulnerabilities are being discovered and released each month. Most companies work diligently to maintain an efficient, effective security policy, implementing the latest products and services to prevent fraud, vandalism, sabotage, and denial of service attacks. But the fact is you have to patch every hole of your system, but an attacker need find only one to get into your environment. Whilst many organisations subscribe to major vendor's security alerts, these are just the tip of the security iceberg and even these are often ignored. For example, the patch for the Code Red worm was available some weeks before the worm was released. [02]

    Read More

  • Overview of Network Security

    868 Words  | 2 Pages

    ...work Security Article). With this given information in the essay, is a great start to learn how to keep your network secure. This is only a small part of the prevention of infiltration of your network and computer. If one desires to learn more, go above and beyond and continue to learn on how to keep your network secure.

    Read More

  • Network Security

    1526 Words  | 4 Pages

    ABSTRACT : This paper describes the basic threats to the network security and the basic issues of interest in designing a secure network. it describes the important aspects of network security. A secure network is one which is free of unauthorized entries and hackers. INTRODUCTION

    Read More

  • Case Study On Tjx Breach

    817 Words  | 2 Pages

    Implement physical security: - “Physical security protects people, data, equipment, systems, facilities and company assets” (Harris,

    Read More

  • Effective Physical Security

    2468 Words  | 5 Pages

    People have been using physical security measures such as barriers for protection for centuries (McCrie, 2007). Every living thing uses physical security to protect their home, family, and themselves with some form of barriers. These barriers can be either man-made or natural as long as they define, delay, or detect unauthorized access (Fennelly, 2004). These barriers are used to protect not only the facility but the assets located inside. I will describe these barriers starting from the outside and working into the facility.

    Read More

  • Biometric Technology

    1204 Words  | 3 Pages

    Nowadays, the information is the most treasured asset in an organization, due to it along with the experience represents the input necessary to take appropriate decisions and consequently to have success in the business. Almost all the information and knowledge related with the processes business, goods and services offered by a company, is processed, managed and stored through technology and information systems, thus the security of information has become increasingly important and plays a critical role in the enterprise government.

    Read More

  • Risk Management Strategies

    1713 Words  | 4 Pages

    This report aim to explain how is achieved risk control through strategies and through security management of information.

    Read More

  • Physical Security Case Study

    1226 Words  | 3 Pages

    the risk of security incidents and breaches is reduced by encouraging employees to think and act in more security conscious ways;

    Read More

More about Proposal: Network Security

Open Document