24 Feb DHN1: Secure Network Design Company A Risk Analysis
Company A Risk Analysis
Company A performed an internal risk analysis in anticipation of system integration with Company B. This risk analysis was performed in accordance with NIST SP 800-30 Rev 1 to identify the following:
• vulnerabilities
• risk likelihood
Table A. Risk Classifications
Risk Level
Description
High
The loss of confidentiality, integrity, or availability may be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals.
Moderate
The loss of confidentiality, integrity, or availability may be expected to have a serious adverse effect on organizational operations, organizational assets, or individuals.
Low
The loss of confidentiality, integrity, or availability may be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals.
Table B. Data Sensitivity
Type of Data
Sensitivity
Confidentiality
Integrity
Availability
Customer PII (e.g., Account Numbers, Social Security Numbers, and Phone Numbers)
High
High
Moderate
Employee PII (e.g., Social Security Numbers and Employee Identification Numbers)
High
High
Moderate
Company intellectual property (e.g., credit scoring calculations)
High
High
Moderate
Marketing and advertising
Moderate
Moderate
Low
Table C. System Inventory
System Components
Servers
Windows server 2019; role: internal SharePoint server
Windows server 2019; role: Exchange server
Windows server 2012; role: Application server
Windows server 2012R2; File server
DMZ Windows server 2012; role: FTP and external Web Server
Workstations
75 – Windows 10 Pro
20 – configured for remote desktop access
Switches
4 – Cisco 3750X
Firewall
Fortinet’s Fortigate 800D NGFW
Border router
Cisco 7600
Laptops
14 – Windows 7
6 – Windows 11
Wireless Access Points
2 – Meraki MR28
Cable plant
Cat5e
Table D. Risk Identification
Risk #
Vulnerability
Risk Likelihood
1
Open ports 21-90, 3389
High
2
All users use eight-character passwords
High
3
User accounts no longer required are not removed
Moderate
4
All users have local administrative privileges
Moderate
5
Regular password changes are not enforced
Moderate
6
End-of-Life Equipment in use
Low
Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.