Toussaint Chivars
IS3110/Lab2
8/16/2014

Align Risks, Threats & Vulnerabilities to COBIT Lab 2

1. List indentified threats & vulnerabilities Risk Factors from Lab1

a. Unauthorized access from public Internet High risk

b. User destroys data in application and deletes files High risk

c. Hacker penetrates your IT infrastructure and Medium risk gains access to your internal network

d. Intra-office employee romance gone bad High risk

e. Fire destroys primary data center Low

2. PO9.2 IT Establishment of Risk Context; PO9.3 Event Identification; PO9.4 Risk Assessment.

3. a. Unauthorized access from public Internet Integrity
b. User destroys data in application and deletes files Availability c. Hacker penetrates your IT infrastructure and Confidentiality gains access to your internal network

4. The risks potential, the current protection level and the mitigation steps needed to prepare or reduce the risks/damages. 5. a. Threat vulnerability 1: unauthorized from public internet

Information---firewall and encryption.

Applications---only from recommended sources (applications with encryption, antivirus protection will be used.

Infrastructure—Firewalls

People---IT awareness training for all employees, monitoring from IT manager

b. Threat or Vulnerability 2: User destroys data or deletes files

Information---rotation of employees, control of data access.

Applications---only authorized personnel (IT manager) with administration rights

Infrastructure-- only authorized personnel (IT manager) with administration rights

People--- only authorized personnel (IT manager) with administration rights