CSI1101: Investigation into Computer Security Countermeasures - IT Assignment Help

Assignment Task:

Assignment Overview:
This assessment requires you to write a report on a given situation where you will be required to investigate the existing security issues (technical and non-technical) and propose countermeasures to overcome the identified problems. The assessment will develop your understanding of analysing security issues and apply the knowledge learned throughout the semester to provide solutions to these issues. The assignment will also require you to seek guidance from various security forums such as ‘Australian Government Information Security Manual’, ‘The Australian Signals Directorate (ASD) Top 35 Mitigation Strategies’, and several ‘NIST Standards’. You will be given the references to these resources throughout the semester. You should also apply feedback from Assignment 1/Report 1 to improve your report writing skills in line with the industry standards.

Scenario/Situation:
Safe and Quality Foods (SQF) is a small food manufacturing company operating in Bunbury, Western Australia. SQF currently employs 10 people with fundamental IT expertise. The company currently maintain its IT setup through makeshift/ad-hoc arrangements. The owner of the company (Jason) has plans to expand SQF’s foothold into the online market to increase its customer reach and expand market share. While Jason has started implementing his plans, the employees of the company have informed him about technical issues such as computers operating slowly, malware inspired pop-ups, data getting corrupted etc. that have been affecting SQF’s day-to-day operations. SQF also recently had a cyber security incident where its main laptop containing critical business data got deleted. Due to this incident, the company lost its data as it had no data backup mechanism. An overview of the current IT arrangements at SQF is as follows:

a. The Standard Operating Environment (SOE) consists of 10 x laptops running Windows 7 and Office 2010. All of the systems are updated through default settings.
b. SQF does not have an anti-virus solution nor do they have any firewall/intrusion detection systems (IDS) installed.
c. Internet access is via ADSL using D-Link DSL-2875AL wireless router. Moreover, the wireless router is configured on the default username and password.
d. A website for SQF has recently been developed, and Jason will soon be deploying it using the URL address
e. Employees can bring their personal devices and are able to connect these devices to SQF’s wireless setup for internet access without any authentication.
f. The company does not have any patch management policy.
g. No policy governs the use of IT systems at SQF.
h. There is no physical security to protect laptops and all of the laptops are configured with username ‘SQF’ and password ‘test123’.
i. Power surges occur regularly at SQF.

Task:
1. Jason has approached you to analyse the current IT setup and practices being followed at SQF along with the security issues discussed above. You are required to prepare a succinct report addressing six critical cyber security issues that should be dealt with as a priority by SQF. In devising the security solutions, you should address the following requirements:

a. Identify the six critical issues (threats and vulnerabilities) currently being faced by SQF.

b. Provide a rationale as to why your chosen/identified cyber security issues should be addressed immediately. Justify the potential impact(s) of each of the issue identified in terms of Confidentiality, Integrity, and Availability (CIA) triad.

c. A detailed explanation/demonstration/justification of how you propose to address (application of current security solutions) the identified issues. In doing this, you are required to propose a minimum of two solutions for each of the identified issues.

d. Among the proposed solutions (for an issue), identify which one is the preferred solution. You are to justify why your chosen/preferred solution is better than alternative approaches(s) (i.e. clearly compare/contrast your solution to the proposed alternative(s)).

e. Provide a detailed breakdown/assessment of hardware, software, and training requirements necessary to implement the proposed solution (Note: one solution may or may not involve fulfilling all the requirements, i.e. hardware, software, and training. Further, you are not required to propose the specific brand/model of any of the three breakdown elements. You are only required what hardware, software, and training components are essential in implementing your proposed solution).

2. As Jason has little understanding and knowledge of the prominent threats that could target SQF, he needs to be convinced that your chosen security issues and the proposed/recommended solutions are most appropriate for SQF to run its operations in a secure manner.

This CSI1101: IT Assignment has been solved by our IT Experts at onlineassignmentbank. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.