I have attached the following documents Document Preview: ObjectiveWrite a Risk Assessment Report that is 5–10 pages long and contains a required risk management matrix. Present a senior...

Logistix – Risk assessment report
LOGISTIX – RISK
ASSESSMENT REPORT

Contents
Scenario......................................................................................................................................................... 2
System Characteristics .................................................................................................................................. 2
Risk Assessment ............................................................................................................................................ 2
Purpose ...................................................................................................................................................... 3
Risk Assessment Methodology ................................................................................................................. 3
Risk Model ................................................................................................................................................ 4
Likelihood matrix .................................................................................................................................. 4
Magnitude of Impact ............................................................................................................................. 5
Risk Value Matrix ................................................................................................................................. 7
Vulnerability statement ............................................................................................................................. 7
Threat Statement ....................................................................................................................................... 8
Risk Management Matrix .............................................................................................................................. 8
Conclusion ................................................................................................................................................... 10
Works Cited ................................................................................................................................................. 10
Scenario
Logistix Inc. is a logistics and distribution company which manages over thousands of accounts across United
States, Mexico and Canada. The CSPM or Computer Security Program Manager is responsible to protect the
operational and physical security of Corporate Information System at Logistix.
System Characteristics
CSPM is responsible for managing corporate Wide Area Network which spans across 81 remote warehouses and
interconnecting those warehouses to the main data processing environment. The data is transferred via suppliers and
customers through a FTP bridgehead server which is located at the DMZ. Files are encrypted and copied to FTP
server through an automated replication process. The remote automation or the users connect via FTP server to
transmit and or receive the encrypted EDI Files. A major part of the data processing at the Logistix is made possible
by the twin IBM System/390 Mainframes. All the GL and Financial functions are held at mainframe platform. A
microcomputer cluster manages the following: Email routing, HRIS, File storage functions and some other value
added applications. An application layer proxy server does the job of serving the central gateway for the internet
connectivity for corporate office and the 81 warehouses. Most of the network has been designed by maintain a strict
principle of control, outsourcing and centralization. The web server of the company and al the e commerce related
functions are managed by a third party, which is not into the scope of this topology.
Risk Assessment
Definition
Risk assessment is a critical tool for Information Technology Managers that enables them to use and evaluate the
security at the IT systems which they manage. It is also used in determining the potential loss or damage to the
organizational operations, stakeholders and missions.
The risk assessment provides the IT management with the ability to:
 To provide for a sufficient level of protection for Information Technology Systems and Applications.
 Satisfy the over signing organizations
 Meet the required federal requirements for the information and system security
 Determine an acceptable level of risk.
Risk can never be fully...