Evaluation of the Maintenance Programme

-

 

Evaluation of the Security Programme

The proposed security programme for Linkchain Gaming provides a comprehensive, multi-layered approach to addressing the vulnerabilities identified in Task 1. It successfully targets the three primary attack vectors present in the scenario: human factors (phishing and user behaviour), technical weaknesses (malware, lack of monitoring, weak authentication), and organisational gaps (poor access control and policy enforcement).

Measures such as email security filtering, staff awareness training, and phishing simulations directly mitigate the most significant risk identified—Jordan’s unsafe handling of email attachments. At the same time, technical controls including Intrusion Prevention Systems (IPS), network behavioural analysis, endpoint protection, and patch management address malware infections and unauthorised network activity. The introduction of Multi-Factor Authentication (MFA) and Privileged Access Management (PAM) specifically responds to the previous credential-based breach, significantly reducing the likelihood of unauthorised access even if credentials are compromised again.

Overall, the programme demonstrates strong alignment with the organisation’s risk profile and provides defence in depth, ensuring that if one control fails, others remain in place to mitigate the threat.

Trade-offs and Limitations

Despite its strengths, the programme presents several practical limitations and trade-offs that must be considered:

  • Cost:
    Implementing advanced solutions such as PAM, DLP systems, and network behavioural analysis tools can be expensive, particularly for a medium-sized organisation. Licensing, infrastructure upgrades, and ongoing maintenance costs must be budgeted.
  • Resource and Skills Requirements:
    Many of the proposed controls (e.g. log analysis, IDS/IPS management, network monitoring) require skilled cybersecurity personnel to manage alerts and respond effectively. Without adequate staffing or training, these systems may generate alerts that are not acted upon.
  • User Impact and Productivity:
    Security measures such as MFA, restricted downloads, and strict access controls may initially reduce user convenience and productivity. Employees may resist changes, particularly if they are not supported with adequate training.
  • Implementation Time:
    Rolling out organisation-wide changes such as Zero Trust architecture, policy updates, and training programmes will take time and must be carefully phased to avoid operational disruption.
  • False Positives:
    Systems such as IPS and email filtering may occasionally block legitimate activity, requiring manual review processes, which can increase workload.

These limitations highlight the importance of balancing security with usability and operational efficiency.

Prioritisation of Implementation

Given the range of vulnerabilities and resource constraints, Linkchain Gaming should adopt a risk-based prioritisation approach, focusing first on controls that address the highest likelihood and highest impact threats.

Priority 1 – Immediate Implementation (Critical Risks)

  • Security awareness training (phishing focus)
  • Email security filtering solution
  • Multi-Factor Authentication (MFA)

These controls directly address the primary attack vector (phishing and credential compromise) and provide the greatest immediate reduction in risk.

Priority 2 – Short-Term Implementation

  • Endpoint protection and regular malware scanning
  • Patch management and system updates
  • Basic network monitoring and firewall rule improvements

These measures strengthen technical defences and reduce the likelihood of malware persistence or exploitation.

Priority 3 – Medium-Term Implementation

  • Privileged Access Management (PAM)
  • Data Loss Prevention (DLP)
  • Network behavioural analysis tools

These solutions enhance visibility and control across the network but require more investment and planning.

Priority 4 – Long-Term / Strategic Improvements

  • Zero Trust architecture
  • Full policy review and Cyber Essentials certification
  • Ongoing audits and continuous improvement processes

These provide long-term resilience and maturity in the organisation’s security posture.

Consequences of Not Implementing the Programme

Failure to implement these measures would leave Linkchain Gaming exposed to continued and potentially more severe cyber-attacks. Given the existing credential breach and evidence of phishing attempts, the organisation is already a target for attackers, and inaction would significantly increase the likelihood of:

  • Data breaches involving sensitive and unannounced intellectual property
  • Financial losses due to operational disruption, ransomware, or recovery costs
  • Reputational damage, leading to loss of customer trust and competitive disadvantage

From a legal and regulatory perspective, non-compliance with data protection requirements such as the UK General Data Protection Regulation (GDPR) could result in:

  • Mandatory breach reporting within 72 hours
  • Significant financial penalties (fines can reach millions of pounds depending on severity)
  • Legal action from affected stakeholders

Additionally, repeated incidents may indicate negligence in security practices, further increasing regulatory scrutiny and long-term business impact.

Overall Conclusion

In conclusion, the proposed security programme provides a well-structured and effective approach to mitigating the risks identified within Linkchain Gaming. While there are cost, resource, and usability considerations, these are outweighed by the significant reduction in risk and improved organisational resilience. By prioritising high-impact controls such as MFA, email security, and user training, and gradually implementing more advanced solutions, Linkchain Gaming can develop a robust, scalable, and sustainable security posture.

Failure to act would not only expose the organisation to further cyber incidents but could also result in serious financial, legal, and reputational consequences, making the implementation of this programme both a technical necessity and a business-critical priority.

Comments

Post a Comment

Popular posts from this blog

OS A3 Task 1

-
    Threat   Vulnerability   Asset   Impact   Likelihood   Risk   Action   Control Type   Gate is left unlocked for the purpose of  convenience   This allows intruders to access the building with ease   Physical  data  stored  on premises                  Confidential data could be accessed by the attackers  and  stolen           Medium   Gates are always left unlocked for convenience and  visitors           High   Data is exfiltrated from the company with potential  to damage company reputation, breach of GDPR with financial implications and potential for customers  becoming victims of identity theft     High   Provide users with passcodes to enter the  building and  implement a security system at the gate to  identify  and authorise access buil...
Read more

OS A3 Task 2

-
Task 2   Introduction   As a new , up-and-coming,  growing organisation,  Linkchain  Gaming must ensure that its information security policy is tailored to  its  requirements and aligned with regulatory standards. A modern s ecurity compliance with laws and regulations. This report will outline recommended user and  administrative  controls for an updated security policy. These controls aim to protect sensitive data ,  and recommendat ions are supported by recognised frameworks.   User Controls    Network and Wi-Fi Access:   Threats Addressed:  Network passphrase on noticeboard, visitors on same network   To  protect the network, it is important to remove the passphrase from the noticeboard and change it. It is recommended  to create a segmented network with a   separate  guest passphrase for  visitors,  so they are completely isolated from internal systems and the file server. ...
Read more