Microsoft Word - Exercise 2.docx Part A: Asset Threat and Vulnerability Identification on a Network Diagram (20 Marks)Benjamin Yankson, an Information Technology Security Manager for My-University,...

please see attachment



Microsoft Word - Exercise 2.docx Part A: Asset Threat and Vulnerability Identification on a Network Diagram (20 Marks)Benjamin Yankson, an Information Technology Security Manager for My-University, contacted you on a matter relating to IS security risk facing his organization. Benjamin has recently begun to see signs that his security measures are not quite up to snuff (adequate). In the last six months, his company has been hit with several viruses, backup failures, and loss of rather expensive networking equipment. Benjamin feels that this situation warrants,bringing you an independent Information System Risk and Policy Specialistto help his organization begin the IS security risk evaluation. The objective of this case is to use the risk identification process established in Figure 1 to Identify or brainstorm about known vulnerabilities and threats specific to each asset in Figure 2. Figure 1. Information Systems Security Risk Identification Process Diagram As part of the initial document received, Benjamin provided you with a Network topology diagram (Figure 2). Using Figure 1, IS Security Risk Identification Process Diagram, conduct a Risk Identification based on the organization’s network diagram Figure 2. Present your answer using a table format. For each asset in Figure 2, identify at minimum one vulnerability,and specify one threat that has a probability to exploit it. (Note: For the purpose of this assignment, you can consider all servers as one) Figure 2. Network TopologyTable 1. This table is a sample Table for Asset, Threat, and Vulnerability Identification. Asset Name Vulnerability Threat *The