Internal Cyber Investigation

CRJ626 Unusual VPN Activity Scenario

It recently came to the attention of a newly hired network administrator at CyberNav that an

unusual amount of computer traffic has been occurring via the VPN connection. Upon closer

inspection, the network administrator has noticed that some important documents and digital

holdings have been accessed remotely. Normally, this wouldn't raise concerns, but some of the

assets that have been accessed were categorized as SENSITIVE information while others were

denoted as INTERNAL USE ONLY

Upon further review, the network administrator has noticed a disturbing trend. When the accessed

information is examined individually there seems to be little cause for concern. However, when

select documents and assorted pieces of information are cumulatively evaluated. It appears as

though top-secret industrial information might be accessible. In this case, however, the network

administrator cannot be completely certain as the extent of the exposure or the liability to either

the company or its employees.

Pertinent security personnel have been alerted to the VPN activity, but higher corporate

information technology specialists are unsure how best to proceed. Corporate representatives find

themselves in a Catch-22 as liabilities may attach for any course of action. If they react in an

overly aggressive manner, the concern is that any personnel intent upon nefarious activity will be

alerted to the fact that the company is aware of their activity. If security personnel fail to react in

an aggressive manner, vital secrets could be stolen from CyberNav.

Within your paper you will address identified problems and examine the course of action that

would provide the best protection for CyberNav secrets.