1.) Identify security objective
This is to protect the data and info that is in our systems and allow users to be
comfortable enough to go about their day to day with no worries. In order for this to
happen constant monitoring as well as an up-to-date IT system is a very important
variable.
2.) Identify assets and external dependencies
Assets include the hardware, software, building, etc. External would include the
cloud company we use.
3.) Identify trust zones
The company would be split into the zones. everyone plays a key part in making the
company what it is. From the physical to the administrative has different levels of
accessibility within the company regarding its data and info. security would fall right
in line with the need for employees. This keeps random people Frome just walking
into the business like an employee.'
4.) Identify potential threats and vulnerabilities
Threats that come with any business that includes third party companies and
systems set into place to for employees would have to be hackers and scamers
looking to steel the company’s info. people that want to see the business fail so they
attack it. Vulnerabilities are the problems that the company overlooks. All of the
holes in the security, the devices that either don’t work or work wrong. electronics
that are not secure, out dated backup drive.'
