Chapter 11: Vulnerability and Risk 307 Case Studies for Chapter 11 The case stud

Question

Chapter 11: Vulnerability and Risk 307 Case Studies for Chapter 11 The case studies in this chapter offer generic scenarios for you to read through and answer accord- ing to your own technology and experiences. There are example solutions in a PDF on the DVD Your solutions might vary, but both can certainly be valid. Many case study solutions also point to hands-on videos and simulations, which can be found on the DVD. Case Study 11-1: Understanding Risk and Vulnerability Risk is the possibility of an attack or threat compromising your IT infrastructure. It is normally accomplished by exploiting vulnerabilities in computers, networks, and even people. Scenario: You work for a medium-sized business with 200 computers and users. The company has experienced extremely fast growth, and until now, has not been concerned with risk. Your task is to define risk to your company, and develop plans to deal with it effectively. The board of directors is interested in finding out the annualized loss expectancy for the company's servers. The board also wishes to have some kind of management plan in place tha documentation, and the mitigating of threats and potential compromise. t includes the analyzing of network Question 1: What type of risk assessment should you recommend? Question 2: Because you don't know exactly what will happen to your company's servers in the future, it is impossible to predict exactly what will happen to them, and when, and how much it will cost. What concept, in addition to your risk assessment method, can aid in this? Question 3: What kind of management plan should you implement? What basic steps does it entail? View the solution to this case study before moving on to the next case study.)

Explanation / Answer

Answer 1:

Avoidance

Answer 2:

One strategy to address unpredictable risks is duplication. This means maintaining multiple copies of products and suppliers. In this case keep backup servers new and old ready when one or more server fails.

Answer 3:

Standing & Single Use Management Plan

Hope your question has been resloved. Please do not forget to give a positive like to the answer. Thank you.

Related Questions

Navigate

• Browse (All)
• Browse C
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.