Task 3

-

Scenario

Following the recent security issues the senior management team is concerned that future attacks could be worse and adversely affect the business. It is considering how well the business would cope with this if it were to happen. It is concerned that the business does not have a solid plan and associated mitigations in place to deal with a serious attack, such as insider attacks. Instructions for students To help you complete this task, a breakdown of the current company infrastructure and security measures has been provided in the additional document ‘Company Overview - Assignment Brief Insert’. You will need to refer to this document throughout the task. 

Your manager has asked you to recommend a range of actions that could be taken to provide disaster recovery support from an insider attack on the network in a timely manner, whilst protecting systems and data. Your manager would like to have the company network recovered and fully operational within 48 hours of a major incident. 

The company is willing to invest a substantial budget of approximately £55 000 for this project, as it is estimated that an hour of downtime would cost the company £4 000 in lost revenue. You should focus on justifying recommendations that allow for disaster recovery and restoring operations ahead of concerns. You need to write a disaster recovery document that includes: • your recommendations in the case of service outages • an explanation of how the actions you have taken will better protect the company.

Comments

Post a Comment

Popular posts from this blog

OS A3 Task 1

-
    Threat   Vulnerability   Asset   Impact   Likelihood   Risk   Action   Control Type   Gate is left unlocked for the purpose of  convenience   This allows intruders to access the building with ease   Physical  data  stored  on premises                  Confidential data could be accessed by the attackers  and  stolen           Medium   Gates are always left unlocked for convenience and  visitors           High   Data is exfiltrated from the company with potential  to damage company reputation, breach of GDPR with financial implications and potential for customers  becoming victims of identity theft     High   Provide users with passcodes to enter the  building and  implement a security system at the gate to  identify  and authorise access buil...
Read more

OS A3 Task 2

-
Task 2   Introduction   As a new , up-and-coming,  growing organisation,  Linkchain  Gaming must ensure that its information security policy is tailored to  its  requirements and aligned with regulatory standards. A modern s ecurity compliance with laws and regulations. This report will outline recommended user and  administrative  controls for an updated security policy. These controls aim to protect sensitive data ,  and recommendat ions are supported by recognised frameworks.   User Controls    Network and Wi-Fi Access:   Threats Addressed:  Network passphrase on noticeboard, visitors on same network   To  protect the network, it is important to remove the passphrase from the noticeboard and change it. It is recommended  to create a segmented network with a   separate  guest passphrase for  visitors,  so they are completely isolated from internal systems and the file server. ...
Read more