Network Security and Analysis - For Science Prodigy - APA Format Due Nov 4

Executive Summary

The executive summary can’t really be completed until the course project is completed. This is because the section should summarize BRIEFLY the entire paper.

Company Overview

Here you should identify which of the two company scenarios you are using and briefly summarize the organizations products or services, and business processes.

Two Security Vulnerabilities

Software Vulnerability

Remember, you need to choose only two vulnerabilities from the three categories: hardware, software and policy. It is recommended that you make them limited in scope and very specific. Also, before starting on this section, be sure you have a very clear idea of the definition of the following terms: threat, vulnerability, risk, and consequences. A vulnerability is a weakness such as an unpatched Web server, but it need not be a “weakness” per se. It can simply be an asset exposed to risk unnecessarily. A Web server, no matter how secure, is still exposed to risk. However, what you are going to define is a situation where you will, later in the paper, make a recommendation for a security control that will mitigate risk.

Be sure that, in this section, you clearly define the asset(s) involved, the vulnerability specific to your company’s situation and implementation, the threat(s), risks, and consequences.

You may want to make some general statements about how you went about the process of making recommendations and/or other general information about the solutions section. If not, simply go to the solutions. Do not summarize anything previously stated. Also, do not use the first-person (e.g. “I recommend that….”), if necessary, use “we.” Remember, you are trying to give your paper professional credibility and an objective tone.

Telecommunications Closet Security Recommendation

Here a VERY brief summary of the vulnerability is appropriate but usually, it doesn’t need to be even a complete sentence. This section should focus on defining the specific product or service recommended, the reason that it is better than other plausible solutions, if applicable, and evidence of the efficacy of the solution. This evidence needs to be supported by research. Statements like, “Anti-virus software is effective at protecting workstations,” is, in a business environment, of no use. Managers need to justify their budgets and need facts.

Impact on Business Processes

Usually, security controls have some impact on business processes. For example, recommending that users be forced to change their passwords every week is going to cause a lot of frustration for users. They will lose productivity while they’re contacting IT to have their forgotten passwords reset. But, if it HAS to be, then explain what the impact will be on business processes and how the “pain” of the solution is justified by the reduction in risk. Also, remember that the focus of this paper (and all IT work) is optimizing the organization’s ability to meet its goals. While you may need to address how IT itself is impacted by these solutions (changes is staffing, procedures, training, etc.) the focus should be on how users will be impacted.

Budget

While a budget table is not required, it’s usually the easiest and clearest way to show this information. Be sure that you are using the most reliable figures available and that your list is complete with a notation that the figure is a rough estimation if necessary. Most of your figures must be real costs obtained through your research. Your client will be grilled by upper management and, if you don’t give your client the ammunition needed to justify the budget request, you have just lost a client.

Summary

Like the Executive Summary, this section should not be long. A summary should not include a lot of new information, it is appropriate to note smaller issues such as time to implement. This section should remind the reader of the key issues raised and how acting on them constitutes a prudent approach.

Internet

T1

Internet router

Corporate FirewallOffice Firewall

T1

Corporate

Network

Office

Network

DMZ

Internet router

O

f

f

i

c

e

I

P

S

e

c

T

u

n

n

e

l

O

f

f

i

c

e

I

P

S

e

c

T

u

n

n

e

l

WAN

Diagram

�

�

�

�

�

�

Title 

�

Wireless Connection

Internal LAN

Internet

Office Firewall

T1

ISP Router

Email ServerFile Server

Web Services

Active Directory Server

TFS code repository

Print Server

Wireless

Access

Point

Wireless

Access

Point

Company Owned Desktop

Company Owned Laptop

Company Owned

Mobile Device

Database Server

Corporate Network

Diagram

�

�

�

�

�

�

�

�

�

�

�

�

�

�

�

�

�