Scenario:

You have been hired as a consultant by MyInc Corp to review and improve their information

security configurations and practices and aid in their expansion by adding satellite offices for

sales.

Department 1 - Human Resources and Payroll

Systems:

• Desktops running custom software not available elsewhere.

Department 2- Sales and Marketing

Systems:

System containing customer information including orders.

• Laptops for use by sales staff

o Staff receive large amount of email from potential customers.

o Staff uses Laptops both at work and at home.

Department 3-Servers (Shared Resources)

Systems:

• Web Server hosting corporate website including online store.

• Company Mail Server

• HR File Server

o Contains all HR and Payroll data.

Department 4-Printing Services (Shared Resources)

Systems:

• Networked Copier

Networked Scanner/Printer/Fax

● Networked Plotter/nHR/Payroll

DE

Current Security:

Sales/Marketing

• External Firewall - Configuration

Servers

Mal

o Blocks all other incoming traffic

There is no Remote Access to Sales DB

**** &

o Allows all outgoing traffic with NAT

o Allows incoming Web traffic to Web Server

o Allows incoming mail traffic to Email Server

01

Printing Services

Caper

•

•

Dept.1 software restricted to only systems in Dept. 1

• Dept. 2 Access Point uses secured WiFi

• Basic username and passwords on systems

•

Servers are only accessed through software systems (File Transfer Protocol, HyperText

Transport Protocol) or through remote terminal software (telnet)./n1. (5pts) On a scale of 1 (lowest) - 10 (highest), how would you rate the current security

setup of the system. Give a short justification for you answer.