Running Head: ISE 620
1
ISE 620 : Final Project Milestone 3
ISE 620
2
Countermeasures Analysis
The proper introduction and execution of the countermeasures would help to
effectively curb the online threats and risks. In addition to this, it would also help
to strengthen the existing security policies and practices that are implemented in
the organizational setting. The countermeasures have been designed so that the
negative implication on various elements could be limited such as organizational
Systems, organizational operations, and organizational personnel.
Reduced negative impact on Organizational Systems
The security analysts are supposed to carefully analyze the activities that are
conducted on the organizational network. Such a countermeasure would play a
critical role to make sure that malicious and suspicious activities or behavior could
be identified right from the start. This approach would be necessary to make sure
that the gaps that could exist in the Organizational Systems can be identified and
suitable actions can be taken to mitigate the security problem (Antivirus Best
Practices, 2019).
The application of necessary security tools such as Nmap would help to
conduct the scanning activities so that the target could be identified and suitable
measures could be taken by the Information Technology department for taking
effective actions so that the organizational system would not get compromised.
Similarly, the use of the most effective anti-virus or anti-malware platform in the
business setting would ensure that the system functions in an efficient and secure
manner (Antivirus Best Practices, 2019).
Reduced negative impact on Organizational Operations
By making sure that all the security tools and applications are effective to
deal with the vulnerabilities and threats, they must be regularly updated. Similarly,
ISE 620
3
the proper check of the IP addresses that are a part of the network would help
to identify any suspicious or malicious activity that would be evident in the firm’s
Information Technology infrastructure. The proper maintenance of the IP logs
would help the Network Administrators to capture any activities that are not
related to the business activities and processes. Such a holistic approach would
be vital to minimizing the extent of negative impact on the operational activities
that are carried out by the business undertaking.
The use of the Intrusion Detection and Prevention System (IDPS) would
play a critical role to minimize the adverse impact of the security attack on
organizational operations. These vital tools would primarily help to identify
suspicious and malicious activities that could exist in the IT ecosystem of the
business undertaking and negatively impact the operations and processes.
Reduced negative impact on Organizational Personnel
The effective implementation of physical access controls would make sure
that the security policies and protocols are in place. By restricting the movement
of outsiders or visitors, the organization could ensure that confidential and sensitive
business information would not get leaked to outsiders. By carefully keeping a
check on the movement of employees as well as outsiders in the organizational
premises, it would be easier to introduce suitable security measures and strategies
so that the adverse impact on the organizational personnel could be reduced or
completely mitigated. Addition security cameras and CCTVs could be installed so
that the security personnel could assess the actions of the personnel and identify
any kind of abnormal action or behavior in the organizational context. In addition
to the physical access policy, a robust user access policy would ensure that
unauthorized personnel do not gain access to confidential business information. The
ISE 620
4
proper documentation of all the processes would make sure that the personnel of
the organization is well informed about the security actions that should be taken
in case a security breach incident takes place in the future. Such an approach
would primarily empower the employees as they would be prepared to take
necessary actions which could minimize the overall vulnerability of the business
undertaking in the uncertain cyber setting.
References
Antivirus Best Practices. (2019). Retrieved September 27, 2019, from
ncb.mu/English/Documents/Downloads/Reports and Guidelines/Anti Virus Best
Practices.pdf
