Cmgt/430 Enterprise Security

Information technology is grabbing the globe of business. Without the information technology technology, the existence of cloud computing is not possible.

Remote access must be strictly controlled. Remote access allows authorized users to access network resources as if they were at the physical location of the company network. These connections may be made over the phone lines by directly dialing into a remote access server on the network, or they may be made by virtual private networking (VPN).The VPN server will support Layer 2 Tunneling Protocol (L2TP) tunneling with Internet Protocol Security (IPSec) encryption. Dial-in remote access uses modems, servers running the Routing and Remote Access (RRAS) service, and the Point-to-Point (PPP) protocol to enable remote users to access the network.

In the interest of business continuity, remote access will be utilized. User wishing access to internal network assets will only be able to access said assets with the use of a

Riordan Manufacturing is in need of a new network, this plan will develop a network that will benefit the business, the employees and the customers in a manner that will provide all of them with a smooth operating experience as well as to future proof the entire network. The Network will handle all incoming and outgoing traffic for both the employees on the intranet, as well as the customers on the external internet web site. Quality of Service (QoS) will be implemented to assist in data tracking for use of the bandwidth to determine and plan how much bandwidth is needed and to determine where congestion

Riordan currently operates four manufacturing plants; three located in the United States (San Jose, California; Pontiac, Michigan; and Albany, Georgia) and one overseas (Hang Zhou, China). Each plant contains the same basic departments, to include Sales and Marketing, Operations, Finance and Accounting, Information Technology (IT), Legal, and Human Resources. There are a few things we

The focus of cloud computing is providing with scalable and a cheap on-demand computing infrastructure with a good quality of service levels. The process of the cloud computing involves a set of network enabled services that can be accessed in a simple and general way. Cloud computing provides with a unique value proposition for any organization to outsource their information and communication technology infrastructure. Moreover, the concept itself provides with a value proposition for an organization as using the cloud saves on cost, resources, and staff, and business opportunities for the organization (Katzan). An extensive connectivity of

The Administrator section handles the primary operational functions it gives the number of workers in particular areas, a description of the various computers used and their individual locations and 36 VOIP telephones. The Research and Developments section has a 1000baseF network and is MAC based there are 15 employees each with computers; this section includes three high-end color printers and a plotter. The 1000baseF network is connected to the corporate LAN through a switch. The next section is for servers. Riordan Manufacturing are using IBM servers that are configured as a WIN server, WIN Exchange server, and UNIX server. These servers host the corporate enterprise resource planning software; the second unit will be the WIN servers, all of these servers will be the IBM model #HS20 blade servers and the third server will be the central UNIX server is an IBM P series. The last section is the communications section which has two main parts the first is the data link to the Satellite base station through a switch and a VOIP router to connect the two facilities with data and voice. The satellite operates on 51.8mb Ks Band wave which is setup to handle an OC1 data rate with end-to-end encryption. The second part of communications is a router to provide a T3 connection through a firewall to the outside

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

All plants still use hubs that need replacing with switches for added security and network scalability. The Pontiac plant still uses Cat 3 cables that may cause compatibility issues with newer network specifications and should be replaced with Cat 5e cables or better. If network cabling becomes incompatible with many specifications, this will cause issues with network components not providing the appropriate services and functions. The Albany plant uses cat 5 cables that currently still works well with other network devices, but may need updating to Cat 5e cables or better to keep up with newer network specifications. Updating each plant 's network cabling to Cat 5e or better will allow the organization to implement improved network systems, such as Virtual Local Area Networks (VLANs) and Virtual Private Networks (VPNs). Furthermore, each plant still use old operating systems, such as Windows 98 and Windows 2000 that do not benefit from the latest security updates. All outdated or legacy hardware and software must be replaced with new ones within each plant to ensure the availability, confidentiality, and integrity of information in Riordan Manufacturing.

Upon approval by the CEO, X-Rocket shall permit employees to utilize mobile devices only, such as smartphones and tablets, for work purposes. Only one mobile device is permitted per employee. While mobile devices are not immune to viruses or third-party hacking, laptop and desktop computers are more susceptible to such (source). In order to restrict third-party access, X-Rocket will require employees to install a mobile application on devices in which all work must be conducted. The application will use geolocation and network certificate features, which will restrict access to the application to the workplace only. To prevent data leakage, screenshot, camera, and other sharing features will be disabled by the application, but may vary depending on the operating system of the mobile device. By using a single application, X-Rocket will also be able to track all data accessed and all work conducted by employees. However, failure to use the application while connected to the BYOD system will result in disciplinary action. If an employee resigns or is terminated from X-Rocket, the mobile device must be cleared of any X-Rocket property, and credentials to access the application will be invalidated. Lastly, to ensure proper networking safety procedures, employees must read and digitally sign a networking safety policy at the start of the application before further access is granted. Failure to comply with the recent changes to the X-Rocket BYOD policy will result in disciplinary action or

Some of the immediate advantages of cloud computing involve lower equipment costs, scalability and online collaboration. A company can take advantage of cloud services without major upgrades to their existing equipment and infrastructure. Using a web browser, most company employees can access “Software as a Service” or SaaS. This service runs on a cloud provider’s server with no installed on the local server within the organization.

User can store their data on cloud and reveal from the local data storage and its maintenance. Cloud is in a distributive in nature includes shared pool of configuring resources both in hardware and software. As an increasing number of clients who store their

Cloud computing is revolutionizing many ecosystems by providing organizations with computing resources featuring easy deployment, connectivity, configuration, automation and scalability. This paradigm shift raises a broad range of security and privacy issues that must be taken into consideration. Loss of control, and trust are key challenges in cloud computing environments. This paper will be describing and focusing on cloud security and privacy. In addition to cloud security, the general model of cloud computing is also described where the cloud security and privacy issues can be approached. To preserve such issues, some propositions for cloud security for reference are also proposed along with a brief description for deployment in cloud computing.

Services such as, data storage and security, are provided by cloud computing over the internet. In cloud computing, users can pay for what they consume (Bisong & Rahman, An Overview of the Securtiy Concerns in Enterprise Cloud Computing, 2011). Cloud computing is an emerging information technology, which can make it easier for the users to manage their data. Cloud computing allows businesses to expand as new cloud-based models are being discussed and implemented as solutions (Bamiah & Brohi, 2011).

This project is going to discuss about the Cloud Computing and its application in business. To briefly describe what cloud