Question: Assessment item 1 Threat and Risk Assessment Report Task Write a Threat and Risk Assessment...
Assessment item 1 Threat and Risk Assessment Report Task Write a Threat and Risk Assessment Report that assesses the findings of a gap analysis and articulates the most prominent risks and threats to the subject organisation - EvolveNet. The audience of the Threat and Risk Assessment Report is the SLT and Executive team of the target organisation and should be authored to a professional standard as would be expected in typical large organisation. The report must include o An assessment of the control gaps identified in the gap analysis report (provided) and risk presented to the organisation o Possible threat scenarios that the organisation is subject to due to the identified gaps o A list of prioritised short-term (tactical) and long-term (strategic) initiatives to address the identified risks o A copy of the threat matrix used for risk level rating A suggested heading structure is provided below
1. Executive Summary
2. Introduction
3. Organisational Assets
4. Threat Categories
5. Vulnerabilities and Threats (table including: vulnerabilities, threat scenarios, likelihood, impact, risk level)
6. Risk Treatment Plan (table including, recommended controls, vulnerabilities addressed, priority, owner)
7. Risk rating matrix Organisational Overview EvolveNet is an Australian VOIP company that supplies over-the- top VOIP services for residential and businesses customers.
Our key product is the the AnyPhone VOIP service that allows customers to make low-cost phone calls across the globe. Additional services include GlobalPhone, which provides a local phone number in 20 different countries. As a world leader, EvolveNet provides the VOIP platform for over 50 domestic and global telecommunication partners. EvolveNet provides a reliable, easily-to-configure, plug and play VOIP service.
Key Information Assets and Systems
- Customer database (~300,000 records)
- Call records (2,000,000 records per day)
- Internet-facing servers (website server, webmail, email, web service, DNS server)
- Internal servers (file, print, intranet, corporate PBX, DHCP and DNS servers)
- Self-service VOIP configuration website
- Web development and test systems
- Wholesale
- Customer-facing PBX and voicemail farm
- Staff workstations and laptops
- VPN concentrator
- Network routers and switches for corporate network
- Boarder and DMZ firewall
- EvolveNet Strategy