TASK 3

-

 Swift FinTech is a fast-growing financial technology company based in London, and it offers services such as digital payments. They are soon expanding their services into Europe and currently in progress to expand its headquarters to meet the company’s expansion. They are currently facing several difficulties which raise serious concerns about its existing network configuration and security controls. The aim of the project proposal is to outline all current issues within the network infrastructure and how they would affect the company. It will also suggest new hardware and software required to enhance the network infrastructure as well as including costs of implementation. It will also include an explanation of any potential network and system security issues with recommended mitigation.  

ISSUE WITHIN THE SYSTEM 

  • There have been unauthorized login attempts 

  • There are outdated encryption protocols 

  • There is inconsistence patching of systems 

  • Unrestricted remote access to company servers 

  • Shared administrative credentials 

  • File server, Client operating systems, and the VPN services are significantly outdated or misconfigured 

  • Weak enforcement of encryption standards on the VPN 

  • User access management is also inadequate 

  • Lack of role-based access controls 

  • Sharing login credentials due to the absence of properly set up user accounts 

  • Ability to install unauthorized software 

  • Logging in from personal devices 

  • Firewall rules are found to be misconfigured 

  • Training videos are found to be outdated  

  • Zero-day exploits are not covered 

Comments

Post a Comment

Popular posts from this blog

OS A3 Task 1

-
    Threat   Vulnerability   Asset   Impact   Likelihood   Risk   Action   Control Type   Gate is left unlocked for the purpose of  convenience   This allows intruders to access the building with ease   Physical  data  stored  on premises                  Confidential data could be accessed by the attackers  and  stolen           Medium   Gates are always left unlocked for convenience and  visitors           High   Data is exfiltrated from the company with potential  to damage company reputation, breach of GDPR with financial implications and potential for customers  becoming victims of identity theft     High   Provide users with passcodes to enter the  building and  implement a security system at the gate to  identify  and authorise access buil...
Read more

OS A3 Task 2

-
Task 2   Introduction   As a new , up-and-coming,  growing organisation,  Linkchain  Gaming must ensure that its information security policy is tailored to  its  requirements and aligned with regulatory standards. A modern s ecurity compliance with laws and regulations. This report will outline recommended user and  administrative  controls for an updated security policy. These controls aim to protect sensitive data ,  and recommendat ions are supported by recognised frameworks.   User Controls    Network and Wi-Fi Access:   Threats Addressed:  Network passphrase on noticeboard, visitors on same network   To  protect the network, it is important to remove the passphrase from the noticeboard and change it. It is recommended  to create a segmented network with a   separate  guest passphrase for  visitors,  so they are completely isolated from internal systems and the file server. ...
Read more