Threats-Vulnerabilities
Overview:
· Write paper in sections
· Understand the company
· Find similar situations
· Research and apply possible solutions
· Research and find other issues
Car Vend Sales inc
· You are an Information Technology (IT) intern
· CarVend Sales Inc.
· Specializes in online and vending machine sales of new and used cars
· Headquartered in Seattle, Washington
· Three other locations
· Portland Oregon
· Phoenix, Arizona
· Los Angeles, California
· Over 1000 employees
· $750 million USD annual revenue
Data centers
· Each location is near a data center
· Managed by a third party vendor
· Production centers located at the data centers
Car vend sales inc
· CarVend Sales
· Handles customer purchases, trades and returns
· Online sales
· Small car lots
· CarVend Finance
· Web Portal to qualify customers for purchases
· Accepts various payment methods including debit, credit cards and loan financing
· CarVend Delivery
· Vendors who deliver cars to buyers homes
· Vendors that deliver to vending machines
Car Vend Sales IT network:
· Four corporate data centers
· Over 1000 data severs
· 700 corporate laptops
· Mobile devices such as tablets in vendor delivery trucks
· Networked vending machines
Management request
· Current risk assessment was done quickly when the company was founded
· Your assignment is to create a new one
· Additional threats may be found during re-evaluation
· No budget has been set on the project
Threats identified
· Loss of company data due to hardware being removed from production systems
· Loss of company information on lost or stolen company-owned or vendor assets, such as mobile devices and laptops
· Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so on
· Internet threats due to company products being accessible on the Internet
· Insider threats
· Changes in regulatory landscape that may impact operations