TEST PLAN

-

 FINICIAL ANLYST:

WINDOWS 8 OPERATING SYSTEM: Reports frequent crashes and slow system performance. They could test there performance with load testing and stress testing to test the systems peak performance under extreme conditions. 

HEAD OF COMPLIANCE:

REMOTELY WORKS USING VPN: VPN connection drops and incidents where unauthorised login attempts were detected on their account. How to test it:

  1. Disconnect your VPN.
  2. Use our IP address checker to find your real IP address.
  3. Connect to your VPN.
  4. Use a test from DNSLeakTest.com.
  5. Choose Standard Test.
  6. Check the IP address that shows up. If it matches your IP address from step 2, you have a leak. If it doesn't, your VPN is working as it should

TESTS  

PURPOSE 

EXPECTED OUTCOME 

ACTUAL OUTCOME 

Pen testing 

To find any vulnerability in the system  

If any vulnerability is found, we quickly fix them  

TBD 

Black Box testing 

Evaluate the functionality, security, performance, and other aspects of an application with no knowledge of a system's internals 

We will be able to identify any bugs and issues with the system  

TBD 

White box testing 

Provides the tester with complete knowledge of the application being tested, including access to source code and design documents.  

We will be able to identify any bugs and issues with the system 

 

 

TBD 

Usability testing 

To understand how real users interact with your website and make changes based on the results.  

We will learn the user end to end experience, and we will find how to improve their experience 

TBD 



IT SECURITY ENGINEER:
Firewall rules are allowing unrestricted remote desktop connections. In order to test for this they should carry out port scanning which sees packets sent to destination port numbers using various techniques. Several of these include: Ping scans: A ping scan is considered the simplest port scanning technique. They are also known as internet control message protocol (ICMP) requests.

RISK MANAGER:
Outdated TLS protocols are still being used in payment processing systems. Vulnerability scanning, cipher suite evaluation, certificate validation, protocol compatibility checks, configuration audits, key management assessment, performance testing, security header analysis, network traffic analysis, manual testing, continuous monitoring, penetration testing, compliance verification, and incident response drills

IT ADMINSTRATOR:
Several users have the access to the admin password and have used it install unauthorized software. Try clearing browser data, switching devices, checking for incorrect credentials, or contacting customer service for assistance

Comments

Post a Comment

Popular posts from this blog

OS A3 Task 1

-
    Threat   Vulnerability   Asset   Impact   Likelihood   Risk   Action   Control Type   Gate is left unlocked for the purpose of  convenience   This allows intruders to access the building with ease   Physical  data  stored  on premises                  Confidential data could be accessed by the attackers  and  stolen           Medium   Gates are always left unlocked for convenience and  visitors           High   Data is exfiltrated from the company with potential  to damage company reputation, breach of GDPR with financial implications and potential for customers  becoming victims of identity theft     High   Provide users with passcodes to enter the  building and  implement a security system at the gate to  identify  and authorise access buil...
Read more

OS A3 Task 2

-
Task 2   Introduction   As a new , up-and-coming,  growing organisation,  Linkchain  Gaming must ensure that its information security policy is tailored to  its  requirements and aligned with regulatory standards. A modern s ecurity compliance with laws and regulations. This report will outline recommended user and  administrative  controls for an updated security policy. These controls aim to protect sensitive data ,  and recommendat ions are supported by recognised frameworks.   User Controls    Network and Wi-Fi Access:   Threats Addressed:  Network passphrase on noticeboard, visitors on same network   To  protect the network, it is important to remove the passphrase from the noticeboard and change it. It is recommended  to create a segmented network with a   separate  guest passphrase for  visitors,  so they are completely isolated from internal systems and the file server. ...
Read more