Lab 4 Assessment Worksheet Millers Class

1. What is the goal or objective of an IT risk management plan?
Identify risks that could lead to an information security breach, Identify vulnerabilities in system security, software operation, network design or employee procedures that could lead to a network failure.
2. Why is it difficult to conduct a qualitative risk assessment for an IT infrastructure?
Because it is subjective, based on opinions, no CBA, and no real standards.
3. What was your rationale in assigning “1” risk impact / risk factor value of “Critical” for an identified risk, threat, or vulnerability?
Because it was the most serious risk.
4. When you assemble all of the “1” and “2” and “3” risk impact/risk factor values to the identified risk, threats, and vulnerabilities, how did you prioritize the “1”, “2”, and “3” risk elements? What would you say to the executive management in regards to your final recommended prioritization?
After the risks have been evaluated in terms of likelihood of occurrence and consequences, and when options for risk management have been reviewed, that’s when I will rank the risks and inform the program manager of the assign priorities.
I will then recommend options to the management base on my assessment.
5. Identify a risk mitigation solution for each of the following risk factors:
User downloads and clicks on an unknown e-mail attachment:
Email attachment filtering; convert to another file, attachment filtering, and user education.
Workstation OS has a known software vulnerability:
Fingerprinting tool, disconnect the workstation from the network.
Need to prevent eavesdropping on WLAN due to customer privacy data access:
Stricter controls on network security encryption.
Weak ingress/egress traffic filtering degrades performance:
Check switches, routers to ensure they are up to date. Check routing protocols, and check for unauthorized network access.

DoS/DDoS attack from the WAN/Internet:
Setup IDS and close all unneeded ports and disable ping request.
Remote access from home office:
Ensure encryption using a VPN through hardware and software.
Production server corrupts database:
Scan server for malicious code, and clean the server.