I’m working on a computer science question and need guidance to help me study.At some point in the life cycle of a cybersecurity program, vulnerabilities assessment or penetration testing will be done to determine the effectiveness of implemented security mechanisms. The results will need to be carefully analyzed to determine the appropriate mitigations in order to strengthen the security posture.InstructionsIn week 2, you identified the scope of the penetration tests, the results came back indicating that there are vulnerabilities in major areas of the company’s cybersecurity program. Those vulnerabilities include:Physical security -Entrance receptionist lack procedure to properly checking for legitimate business before issuing access badge.
A side door propped by employees who went outside to smoke throughout the day.
Too many system admins have access to the server room.
Network -Alerting of intrusion prevention and detection events were not implemented.
No network segmentation between the Guest network and the internal network.
Servers – Web server and email server are out of date
Firewalls were not implemented on the applications server
Too many system admins have access to ALL servers
Systems – End-user systems – users not locking computer when walking away, users wrote down and left password on Post-it on their desk, and users clicked on links in phishing emails.
Networked printers – PII and the company’s proprietary information are left on the printer in the open.
Users can download and install applications from the application store onto their desktop.
Data storage – Data is not encrypted at rest
Non-email data is not encrypted in transit
Too many system admins have access to ALL data stored
Data access and modification logs are overwritten every 72 hours due to a lack of storage space.
Research the business impacts and mitigations for these vulnerabilities, keep in mind, training might be one of the underlying issues. In a 5-6 APA format paper, use credible sources, to describe the business impact for each of these vulnerabilities if exploited, and describe the mitigation for each of these vulnerabilities.
Requirements: 5-6
