1. Identify threats to the seven domains of IT within the organization.
User Domain: Employee lack of education. A social engineer can trick an employee into giving up there credentials. Users can visit risky web sites and download and execute infected software.
Workstation Domain: Susceptible to malicious software. The anti-virus software is installed and up to date. Computers that aren’t patched can be exploited.
LAN Domain: Any data on the network that is not secured with appropriate access controls is vulnerable. Weak passwords can be cracked. Permissions that aren’t assigned properly allow unauthorized access.
LAN to WAN Domain: Users can visit risky web sites and download and execute infected software. Firewalls with unnecessary ports open allow access to the internal network from the internet.
WAN Domain: Any public facing server is susceptible to DoS and DDoS attacks. A FTP server that allows anonymous uploads can host worms from hackers.
Remote Access Domain: An attacker can access unprotected connections allowing the attacker to capture and read the data.
System/Application Domain: Threats would be not changing default passwords, unneeded services and protocols. 2. Identify the vulnerability’s in the seven domains.
User Domain: User’s going to unrestricted websites and executing infected software.
Workstation Domain: If computers anti- virus software is not up to date then it is exploited.
LAN Domain: A user that doesn’t change their password on a regular basis is vulnerable to having their account hacked.
LAN to Wan: Once leaving the LAN network anything done on the WAN network can be compromised because it’s not on the company’s local network.
WAN Domain: If a user is using the WAN domain then anything they are doing is untrusted and accessible by hackers.
Remote Access Domain: If a user fails to encrypt their data then it can be accessed from anywhere.
System/ Application Domain: If a user does not change their password on a regular basis then it can easily be hacked. 3. Identify Pairs to determine threat actions.
User Domain: User’s going to untrusted websites and executing infected software will result in viruses and potential threats to the network.
Workstation Domain: Can get a virus, files and documents can be lost.
LAN Domain: If a user does not change their password on a regular basis then their account can be accessed and all the information on it.
LAN to WAN: Lack of security possibility of attack.
WAN Domain: Information can be taken without even realizing it.
Remote Access Domain: If the file is not encrypted then it can be read by anyone.
System/Application Domain: If the user’s password is not updated then their account will be accessed and all the info on it. 4. User Domain: Likely
Workstation Domain: Likely
LAN Domain: Likely
LAN to WAN: Likely
WAN Domain: Likely
Remote Access Domain: Likely
System/Application Domain: Likely 5. After reading over the chapter and looking over the note from class we feel that risk management is something that shouldn’t be taking lightly. There are many ways that a company can be affected if the proper protocol is not in place. If a company doesn’t knowledge that it is possible for a company to have an attack that company can compromise their business function, business assets, and business cost.

Reference
Jones & Bartlett Learning, LLC. 2011 Managing Risk in Information Systems