Tesco

Company Security Report Soft Deadline: Monday 2nd November 2020 at 20:59 Hard Final Deadline: Sunday 15th November 2020 at 20:59 Please note: This is a research assignment not an implementation assignment. i.e. you are gathering information through research. You must not try to hack into a company to find vulnerabilities. A soft copy of Tasks 1, 2 and 3 must be submitted at the beginning of semester week 6 (Monday 2nd November 2020) on Canvas and your lecturer will give you qualitative feedback on its content. Your report submission on Canvas will be run through Turnitin anti-plagiarism software. All work must be your own and any content copied and pasted from the Internet will be discarded. Assignment Specification You have started working in an FTSE/ISEQ listed company (this will be assigned to you). This company has received a directive from its CEO to increase security awareness. You have been asked to compile a report for the company. The detail of the report is defined to include the following tasks: Task 1: Describe the business that your assigned company is engaged in. In particular identify their assets that will need most protection (their “Crown Jewels”) such as client lists, current product pricing, future acquisitions, safety, intellectual property etc. The company is concerned about its cybersecurity awareness. You must: ● Identify at least four websites where you can get details of the most current malware threats. ● Compile a list of eight of the most recent threats (excluding Ransomware) which may be of specific interest to the company, including the following information: o The risk analysis of the threat o What type of threat it is o How it works o How you can remove it The CEO is particularly concerned about ransomware so you must detail the use of ransomware in online attacks. Computer Security Principles – Assignment 1- All Tasks Page 2 Task 2: There is a concern about how the company’s internet presence makes it vulnerable. You will write a report on the footprint of the company. ● The first part of this section should consist of a discussion on what footprinting is and a selection of what methods are employed and how. ● Write up the details of any weaknesses which could be exploited in the targeted company based on your research of the company activities and footprint. ● Give solutions to resolving these weaknesses. ● Explain whether and why a company security policy should extend to social networking and other uses of the internet. Detail specific threats. Task 3: The company has a number of concerns around physical and digital access to private parts of the company property. An external security expert has informed management that social engineering could be used to bypass the authentication systems. You are asked to report on this. ● The first part of this section should detail what social engineering is and how it might affect the company specifically giving examples ● The second part of this section should detail good practise that should be employed in the company for both physical and digital authentication, this should take account of the nature of the business. ● Finally you are asked to provide recommendations around what authentication systems should be implemented to prevent physical access. Submission Criteria Your report including all three tasks should be between 3000 and 8000 words and should have accompanying diagrams and graphics to support your findings and conclusions. Each task of the report carries equal marks. The report must be completed individually. NOTE: Any content copied and pasted will be discarded; all work must be your own. The report should be 12pt New Roman font, single line spacing. Your report should include a title page, table of contents, page numbers and bibliography. Final submission date: Sunday 15th November 2020 at 20:59 No submission will be accepted after this deadline.