A new client of your security consulting firm is worried about the potential for data leaks that could expose it to financial losses as well as a damaged reputation. The client recently read a front-page story about a negligence lawsuit arising out of a data leak that exposed confidential client information. The source of the data leak was a peer-to-peer file sharing application that had been installed on an employee's desktop computer. An initial quick-look security assessment found that your client's concerns were well founded. At least one department was using a similar peer-to-peer file-sharing application to distribute promotional videos and audio podcasts to potential customers. Your team leader has asked you to prepare a short technology evaluation paper in which you address one of the problem areas identified in the quick-look assessment:
- Data: Identify and provide an assessment of the risks associated with collection, processing, and storage of confidential client information .
- Software: Identify and provide an assessment of the risks associated with unauthorized installation of file-sharing software on company computers, including servers, desktops, and laptops.
Research and evaluate three or more technology-based solutions that could provide effective protection measures. Use one row per technology solution.
Your technology evaluation paper must begin with an executive summary followed by your technology evaluation matrix. The executive summary should provide an overview of your risk assessment and evaluation. It should also provide additional information to help the client understand your recommended solution. Your summary should be concise-approximately three pages long-and include the following elements:
- an explanation of the information security threats and vulnerabilities associated with your selected option
- a comparison of the capabilities and weaknesses of the candidate technology-based solutions
- a recommendation of the best fit technology-based solution to solve/mitigate the problem associated with your selected option