Security Vulnerabilities Within Jacket X Corporation's Information Systems

Lab #1 – Part A – List of Risks, Threats, and Vulnerabilities Commonly Found in an IT Infrastructure

Objective: Assess the security vulnerabilities of an organization's computer/network operating systems along with the techniques used to protect them.

Threat modeling is the process of optimizing an organizations’ security of their network by finding vulnerabilities in that system, and then deploying countermeasures to protect against those threats should they happen in the future. If a company wants to know what vulnerabilities they may have then threat modeling is an excellent way of determining these threats. An individual threat is when an event occurs that has a negative impact on an organization’s daily operations. (Rouse, 2006). These negative impacts can manifest themselves in many ways from damaging the reputation of that organization to interrupting the functions of that organization. These threats can be in the form of destruction or stealing sensitive data, cracking of weak passwords, malware, phishing, or other scams and frauds. The goal of this paper is to address how the organizations code of ethics and security policies apply, what specific security policies can be deployed, and to identify the impact of asset security standards and governance. I chose Northrop Grumman as the focus of my paper

The purpose of the report is to explore the current vulnerabilities in the information system network and outline potential

Security monitoring is an important factor in keeping any organization network safe as various attacks are on a rise. A company constantly must practice monitory techniques to keep their data safe. " The first step is to scan the internal and external environment and identify information technology risks before they become a problem. The key is to be proactive rather than reactive" (Marilyn Greenstein). Different organization consist of many applications that require a certain level of security measures and risk assessment. To determine the associated risks within an organization each application

Furthermore, it is our goal to ensure that all of the necessary visibility and metrics currently being used by each department remains as transparent as possible. The ability to manage and view the general ledger, accounts payable and receivable, inventories for each manufacturing vertical and project, and provide these through customized reports that should be not only tailored to each group but they should provide for greater control of the enterprise as a whole without the reliance on individual accounting teams to maintain accuracy and performance of their business units.

Computers have become part of our daily complex lives; we depend heavily on computers to help break our complicated lives down. Most people now prefer to do things the digital way and so does companies. Most of trading (buying and selling) is now online which requires computers. In order to satisfy our hunger for digital living, there is a need for technology called the operating system to carry out the activities we require our computers to do. Computers and technology come in different forms and sizes and due to the capitalistic nature of our economy everyone is allowed to come up with their own form of computer and even the technology to run it. In recent years’ companies have gained interest doing business digitally and since software have become easier to write or code, it is also vulnerable- easy for programmers to access and exploit called hacking. Hackers are unapproved clients who break into a technological framework, change or decimate data, frequently by introducing hazardous malware without the insight and assent of the host company. Companies are now at risk of losing much more than money by doing business the digital way. It is in this view that the Security Exchange

In this paper I have just been hired as an Information Security Engineer for a video game development company. I have previously identified all of the potential Threats, Vulnerabilities and Malicious Attacks for the videogame development company. The CIO have reviewed my report and has now requested that I draft a report analyzing and assessing any potential Malicious Attacks, Vulnerabilities and Threats that may be carried out against the company’s network. I will then choose a strategy for dealing with risk, such as mitigation, assignment, risk and

Information systems are known to be at risk from malicious attacks, user error, and from other disasters. As technology is relied upon more heavily and computer systems become interdependent and accessible by more individuals, the susceptibility to threats increases. In addition, individuals are developing high levels of computer skills that results in an increased risk of intrusion from outsiders. The Information Security Risk Assessment will determine the assets of the company, organizational risks, the current security posture, any areas of risk for GDI, and recommend a mitigation strategy for reducing information security risks and implementing strategies to reduce these risks. Through the Information Security Risk Assessment, GDI is taking steps to ensure that the organization identifies significant risks and determines the best method to mitigate the risks.

The Sarbanes-Oxley Act (SOX) of 2002, aims to combat fraud, improve the reliability of financial reporting and restores investor confidence. Section 404 of Sarbanes-Oxley emphasize the management’s responsibility in maintaining a sound internal-control structure of financial reporting and assessing its own effectiveness. While the auditors’ responsibility is to attest to the soundness of management’s assessment and to report on the state of the overall financial control system. Although it has been a question by most executives, however, some approached the new law with gratitude. As SOX went into effect, more executives had realized the need for internal reforms; they were startled by the weaknesses and gaps of their internal control that compliance reviews and assessments had exposed.

During an initial review of data for Jacket-X from last year, several potential threats and vulnerabilities were identified. Specifically, the payroll business process was highlighted as containing threats and vulnerabilities requiring immediate attention from management in order to prevent a data breach. Recall threats and vulnerabilities, although often utilized together in discussing cybersecurity risks, are two separate concepts. To review, a threat is defined as an undesirable event that can cause harm”. It is also important to note that threats can be internal or external to an organization (Valacich). Alternately, a vulnerability is defined as a “weakness in an organization’s systems or security policies that

This is called internal control and involves methods and procedures to ensure the accuracy of its payroll records and avoiding fraud.

This article covers cases about employees or former employees of corporate companies who have used hacking and exploitation skills to maliciously gain access to private information, and infect or wipe their databases. This intent to destroy or tamper sensitive information is in violation of the 1986 CFAA (Computer fraud and Abuse Act) “18 U.S. Code § 1030(a)(5)(A)” . Thus, because there have been so many breaches in the computer systems owned by companies there is more need for strict access permissions for employees and reliable high security which can be expensive.

One of the largest manufacturing, design and marketing companies was breached when its antivirus software failed. This allowed hackers to access 600+ endpoints. As a result of the attack, the organization’s IT team faced around-the-clock work and it placed a heavy strain on internal resources. Existing internal tools were not providing enough visibility to solve the problem, and the organization struggled to remediate the issues. The organization needed to immediately

As a business operating a small office, minimal computer and network infrastructure, and users with mobile computer systems (laptops), the broad risk exposure to computer security issues at SCD is relatively low. However, SCD does have some exposure because the company’s office runs a network, and that network connects to the global Internet. In addition, the employees all utilize laptop computers that may be removed from the office and taken to insecure environments. Finally, the business must interact with customers and suppliers which may expose it to some security threats.