5 PAGES TOTAL

All information based from same company chosen in part 1.

PART 1 Introduction to Information Security (2 PAGES)

• This section will describe the organization and establish the security model that it will used
• Choose and describe the company that you will use in this scenario.
• Describe the need for information security, what potential risks or issues exist, and what benefits the company can gain from the new project.
• Describe what new challenges exist with the new project to allow consultants to work on-site.
• What challenges now apply       to the company with the recent IPO taking place?

PART 2 Security Assessment (3 PAGES)

The case study company provided a situation in which threats pose a real risk to the infrastructure. The company assets are not well-protected, and they all share a common network. Little additional security mechanisms are in place other than the demilitarized zone (DMZ). What are typical information security (IS) assets that are used by such a company, and what risks exist in the current model? What will adding a flexible solution for the consultants to connect to the network do to this risk model? What are some safeguards that can be implemented to reduce the risk?

The tasks for this assignment are to identify the major applications and resources that are used by the company. Then, for each application, review the security threats that the company now faces and could face after the expansion. Describe how you can test for the presence of these (or new) risks? Provide a discussion about an approach that you will take after the risk assessment is complete to address the identified risks.

• A description of typical assets
• A discussion about the current risks in the organization with no network segregation to each of the assets
• A discussion about specific risks that the new consultant network will create
• Details on how you will test for risk and conduct a security assessment
• A discussion on risk mitigation