The Domains Of It Infrastructure

The company is served by an IT infrastructure comprising of an amalgamation of off the shelf software and components and locally developed applications and middleware. The hardware infrastructure is by and large robust and capable of withstanding any current operational peaks. The infrastructure employs a high level of redundancy and good recovery and password management systems, so there is little risk of high business impact in the case of IT issues. No architecture document exists and minimal change control is executed.

A successful IT system is something that is composed of several different functional components to make it a whole. It takes each component to efficiently work so that the entire system runs smoothly. When one or more parts of the system are not properly working it can affect the entire IT system as a whole and render it completely vulnerable to people with malicious intentions. In this paper I will discuss the role of each component in it and shed some light as to why each is needed.

The likelihood of an attack or breach dealing with the current infrastructure of the company’s

The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. As we know, GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.

Users can be the main risk to an organization. A disgruntled employee can access the server and open it up to all types of security issues or install malware or virus’. User access to the server should be limited to users that need admin level and closely monitored. Admin accounts should never be used for day-to-day activities as this could lead to username/passwords being stolen more easily providing access to others from the outside. When an employee leaves their admin and general use accounts should be turned off immediately. If an employee is to be terminated with cause, theses accounts should be disabled prior to the termination discussion. Users risk are medium impact and highly controllable with policy and procedures.

There is a mess of servers, switches, switches, and inward equipment firewalls. Each of the association's areas is working with diverse data advances and foundation IT frameworks, provisions, and databases. Different levels of IT security and access administration have been actualized and inserted inside their individual areas. The data engineering framework is maturing and numerous areas are running on antiquated fittings and programming. Additionally, the framework is woefully out-of-dated regarding fixes and overhauls which significantly expand the danger to the arrange as far as classifiedness, trustworthiness, and accessibility.

Recognize the dangers to an association's application security and distinguish the security systems which we can use to secure a domain.

One of these consequences are the injection of a Trojan virus, which is a virus that is hidden to act like a legitimate program or file. Another consequence would be exposing the network to a worm, which could propagate throughout the network and cripple productivity by machine and network slowdowns; this is in addition to possibly injecting other viruses onto the system. Although these are possibilities of allowing outside resources access to the company network, user training, disabling resources, and even standalone virus scanners can prevent these unintentional

* Identify risks, threats, and vulnerabilities in the 7 domains of a typical IT infrastructure

1. User Domain- The User Domain defines the people in the organization that make up the network. Employees are responsible for the use of their assets. That responsibility is extended to the information that is classified as “internal use only”. This domain is affected in a few different ways. First, it forces the user to become aware of what they are sending through emails out to external addresses. Information that is classified as “internal use only” cannot be divulged in emails, texts, or over the phone. This is information that may or may not be classified that must not be seen beyond the confines of the company infrastructure.

Additionally, visiting these sites opens our computer systems to hacking, theft, and fraud, which could result in a catastrophic breach of confidential data such as client information and employee profiles.

2 Since the security is weak it can cause problems if the sensitive data is leaked out of the company in any way.

Which domain requires stringent access controls and encryption for connectivity to corporate resources from home?

Moreover, now days using information system is not as walking as in the park, it has many new security treats that the company might lose their confidential data, financial and personal information.

Read the following case description of an IT crisis and answer the questions posed at the end of the description.