I. Classic Catalog Company, Part 1 Classic Catalog Company runs a small but rapidly growing catalog sales business. It outsourced its Web operations to a local ISP for several years, but as sales over the Web have become a larger portion of its business, it has decided to move its Web site onto its own internal computer systems. It has also decided to undertake a major upgrade of its own internal networks. The company has two buildings, an office complex, and a warehouse. The two-story office building has 60 computers. The first floor has 40 computers, 30 of which are devoted to telephone sales.The warehouse, located 400 feet across the company's parking lot from the office building, has about 100,000 square feet, all on one floor. The warehouse has 15 computers in the shipping department located at one end of the warehouse. The company is about to experiment with using wireless handheld computers to help employees more quickly locate and pick products for customer orders. Based on traffic projections for the coming year, the company plans to use a T1 connection from its office to its ISP. It has three servers: the main Web server, an email server, and an internal application server for its application systems (e.g., orders, payroll). Perform a risk assessment.

II. Classic Catalog Company, Part 2 Read MINICASES III above. Outline a brief business continuity plan, including controls to reduce the risks in advance as well as a disaster recovery plan.

III. Classic Catalog Company, Part 3 Read MINICASES III above. Outline a brief security policy and the controls you would implement to control unauthorized access.

IV. Classic Catalog Company, Part 4 Read MINICASES III above. What patching policy would you recommend for Classic Catalog?