Running Head: ISE 620
1
ISE 620 : Final Project Milestone 3
SNHU
ISE 620
2
Countermeasures Analysis
The proper introduction and execution of the countermeasures would help to
effectively curb the online threats and risks. In addition to this, it would also help to
strengthen the existing security policies and practices that are implemented in the
organizational setting. The countermeasures have been designed so that the negative
implication on various elements could be limited such as organizational Systems,
organizational operations, and organizational personnel.
Reduced negative impact on Organizational Systems
The security analysts are supposed to carefully analyze the activities that are
conducted on the organizational network. Such a countermeasure would play a critical role to
make sure that malicious and suspicious activities or behavior could be identified right from
the start. This approach would be necessary to make sure that the gaps that could exist in the
Organizational Systems can be identified and suitable actions can be taken to mitigate the
security problem (Antivirus Best Practices, 2019).
The application of necessary security tools such as Nmap would help to conduct the
scanning activities so that the target could be identified and suitable measures could be taken
by the Information Technology department for taking effective actions so that the
organizational system would not get compromised. Similarly, the use of the most effective
anti-virus or anti-malware platform in the business setting would ensure that the system
functions in an efficient and secure manner (Antivirus Best Practices, 2019).
Reduced negative impact on Organizational Operations
By making sure that all the security tools and applications are effective to deal with
the vulnerabilities and threats, they must be regularly updated. Similarly, the proper check of
the IP addresses that are a part of the network would help to identify any suspicious or
malicious activity that would be evident in the firm’s Information Technology infrastructure.
ISE 620
3
The proper maintenance of the IP logs would help the Network Administrators to capture any
activities that are not related to the business activities and processes. Such a holistic
approach would be vital to minimizing the extent of negative impact on the operational
activities that are carried out by the business undertaking.
The use of the Intrusion Detection and Prevention System (IDPS) would play a
critical role to minimize the adverse impact of the security attack on organizational
operations. These vital tools would primarily help to identify suspicious and malicious
activities that could exist in the IT ecosystem of the business undertaking and negatively
impact the operations and processes.
Reduced negative impact on Organizational Personnel
The effective implementation of physical access controls would make sure that the
security policies and protocols are in place. By restricting the movement of outsiders or
visitors, the organization could ensure that confidential and sensitive business information
would not get leaked to outsiders. By carefully keeping a check on the movement of
employees as well as outsiders in the organizational premises, it would be easier to introduce
suitable security measures and strategies so that the adverse impact on the organizational
personnel could be reduced or completely mitigated. Addition security cameras and CCTVs
could be installed so that the security personnel could assess the actions of the personnel and
identify any kind of abnormal action or behavior in the organizational context. In addition to
the physical access policy, a robust user access policy would ensure that unauthorized
personnel do not gain access to confidential business information. The proper documentation
of all the processes would make sure that the personnel of the organization is well informed
about the security actions that should be taken in case a security breach incident takes place
in the future. Such an approach would primarily empower the employees as they would be
ISE 620
4
prepared to take necessary actions which could minimize the overall vulnerability of the
business undertaking in the uncertain cyber setting.
References
Antivirus Best Practices. (2019). Retrieved September 27, 2019, from
ncb.mu/English/Documents/Downloads/Reports and Guidelines/Anti Virus Best
Practices.pdf
