You are the Chief Information Security Officer (CISO) of company UOTC Inc. You have a meeting with
Question:
You are the Chief Information Security Officer (CISO) of company UOTC Inc. You have a meeting with the CEO to discuss the findings of an internal audit. You are given two reports. Listed below are the preliminary findings of the first report:
CORPORATE WIRELESS NETWORK: FAIL Comments: The wireless network is currently using Wired Equivalent Privacy (WEP) and customers from a nearby coffee shop are on your wireless network and shouldn’t be there.
APPLICATION AND ACCESS CONTROL: FAIL Comments: All users have full administrative access to every application in the organizations including the critical applications that should be used only by management.
DATA ENCRYPTION LEVEL: FAIL Comment: The organization is current using Data Encryption Standard (DES) and would like to continue using a symmetric key The CEO is concerned about these findings and she would like for you to write up a proposal (recommendations) on how to fix the issues and increase the company’s security posture.
Expert Answer:
Data Security Corporate Wireless Network Wired Equivalent Privacy WEP is a detailed security ... View the full answer
