Examination Of The Technical Vulnerabilities For Global Finance, Inc.

Kim, D., & Solomon, M. G. (2012). Fundamentals of Information Systems SecuritY. Sudbury: Jones & Bartlett Learning.

The network diagram of Global Finance, Inc. (GFI) depicts the layout of the company’s mission critical systems. The company has two servers (Email and the Oracle database) which are used more than any of their other systems. GFI heavily depend on their network to be stable because of their financial systems that are running and any outage would negatively affect their operations and financial situation. Like all other business, customer satisfaction and the security of GFI’s network is crucial. In order to ensure their network and data is secure,

Another way of successfully gathering information is by building a prototype or model of the system, so that users can test or get an idea of what the finished product will be like. With this they can determine issues, problems, or inconsistency with the system. Another important part of gathering information is organizing it so that it can be understood and put to proper use. I propose categorizing the requirements into functional requirements, operational requirements, technical requirements, and transitional requirements. The functional requirements define how the user thinks the system is functioning overall, the operational requirements define what background processes need to be executed in order for the system to work optimally over a period of time, the technical requirements define what technical issues that must be addressed in order to successfully implement the system, and the transitional requirements define the processes or steps needed to implement the system smoothly and successfully. ("Mind Tools", 2012).

The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.

Many companies have several locations that are statewide as well as international. The threat to the company’s security policy is that much greater because of the company’s expansion; this has placed the company’s information at a higher level for security breaches. The company needs to stay up-to date with the latest technology to make sure the company information can be accessed to all of their locations efficiently. Organizations that have global operations have a harder time effectively securing their information. The Internet is one of the common ways that an international company uses to conduct business; because the company can use their website to post information.

GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence. GFI’s failure to incorporate proper firewall devices at Internet access points can be linked to DOS network attacks and Oracle database and email servers being down.

Whitman, M. E., & Mattord, H. J. (2010). Management of information security (3rd ed.). Boston, MA: Course Technology/Cengage Learning.

The risk of financial sector in the United States of America has become increasingly more apparent and more diverse to the United States over the last few decades partially because of the advanced computer and cyber based accounting networks that the Nation has shifted to. The security of our financial systems is absolutely critical including being one of the primary concerns and directly

Provide integrated systems analysis and recommend appropriate hardware, software, and communication links required to support IT goals and strategies within the domain.

Threat modeling is the process of optimizing an organizations’ security of their network by finding vulnerabilities in that system, and then deploying countermeasures to protect against those threats should they happen in the future. If a company wants to know what vulnerabilities they may have then threat modeling is an excellent way of determining these threats. An individual threat is when an event occurs that has a negative impact on an organization’s daily operations. (Rouse, 2006). These negative impacts can manifest themselves in many ways from damaging the reputation of that organization to interrupting the functions of that organization. These threats can be in the form of destruction or stealing sensitive data, cracking of weak passwords, malware, phishing, or other scams and frauds. The goal of this paper is to address how the organizations code of ethics and security policies apply, what specific security policies can be deployed, and to identify the impact of asset security standards and governance. I chose Northrop Grumman as the focus of my paper

The purpose of the report is to explore the current vulnerabilities in the information system network and outline potential

2. Enterprise systems are integrated ISs that support core business processes and functions. How is integration achieved?

A functional Information Technology (IT) system requires all the individual technologies involved to work together to achieve its intended purpose. If one of these technologies fails to perform, the entire system becomes vulnerable to breakdown and failure. In this complex relationship, each component is a receiver as well as a provider of services and data. I will make a connection between core technologies to show how they work together. We will concentrate of the most common and important computer technologies, these include; computers programs, databases, networks, web systems, and security assurance.

The IT audit analysis will enable to determine to what degree the company is secured from the cyber threats. Cybersecurity is one of the most outstanding and embarrassing issues of nowadays. GE Company is also threatened with this tendency. It is evident that the cyber security vulnerability is increasing globally. The corporations and enterprises internationally implement programs to fight with the sophisticated cyber-attacks. The security of data of the GE Power its customers, suppliers, systems and networks, third-party providers is at risk of the cyber threats (GE, 2016, p. 122). The GE aims to ensure the security, availability, integrity, and confidentiality of the company’s and its customers’ data. Within GE, some particular strategies are being currently applied due to the increased risk of cyber-attacks. Operational managers have to ensure the adequate cybersecurity policing. The company does produce highly diverse and sophisticated services and products using both hardware and software. The existence of the crisis management and business continuity plans, operation failures still

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.