Professional Documents
Culture Documents
Purchase here
http://homeworkonestop.com/CIS%20502/cis-502technical-paper
Product Description
CIS 502 Technical Paper: Risk Assessment
Week 10
A Graded Work
13 Pages Excluding Title and References Page.
CIS 502 Week 10 Technical Paper
Technical Paper: Risk Assessment
Due Week 10 and worth 150 points
Global Finance, Inc.
Internet
OC193 10Gbps
Remote Dial UpUsers
OC193 10Gbps
DMZ
Border (Core) Routers
Distribution Routers
VPN Gateway
10Gbps
RAS
PBX
Printers Mgmt (x3)
Credit Dept
Finance
its cash flow and financial systems heavily depend on the network stability. GFI has experienced
DOS network attacks twice this year and its Oracle database and email servers had been down
for a week. The recovery process required GFI to use $25,000 to restore its operations back to
normal. GFI estimated the loss from these network attacks at more than $100,000 including lost
customer confidence.
Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above
diagram of a secure and risk-mitigating model in which you:
1. Describe the company network, interconnection, and communication environment.
2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk
assessment should cover all the necessary details for your client, GFI Inc., to understand the risk
factors of the organization and risk posture of the current environment. The company
management will decide what to mitigate based on your risk assessment. Your risk assessment
must be comprehensive for the organization to make data-driven decisions.
a. Describe and defend your assumptions as there is no further information from this company.
The company does not wish to release any security-related information per company policy.
b. Assess security vulnerabilities, including the possibility of faulty network design, and
recommend mitigation procedures for each vulnerability.
c. Justify your cryptography recommendations based on data-driven decision making and
objective opinions.
3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a
combination of these.
4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar
Websites do not qualify as quality resources.
5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft Visio or its
open source equivalent. Note: The graphically depicted solution is not included in the required
page length.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all
sides; citations and references must follow APA or school-specific format. Check with your
professor for any additional instructions.
6. Include a cover page containing the title of the assignment, the students name, the professors
name, the course title, and the date. The cover page and the reference page are not included in the
required assignment page length.
7. Include charts or diagrams created in Excel, Visio, MS Project, or one of their equivalents
such as Open Project, Dia, and OpenOffice. The completed diagrams/charts must be imported
into the Word document before the paper is submitted. The specific course learning outcomes
associated with this assignment are:
Evaluate an organizations security policies and risk management procedures, and its ability to
provide security countermeasures.
Describe the details and the importance of application security models and their
implementation from a management perspective.
Analyze the methods of managing, controlling, and mitigating security risks and
vulnerabilities.
Evaluate and explain from a management perspective the industry-standard equipment, tools,
and technologies organizations can employ to mitigate risks and thwart both internal and external
attacks.