Final Exam Part II $$ Take home $(40$ points$)$

The second part of the final exam is open book$/$Notes$.$ You can also search the internet for ideas. However, you should complete this assignment on your own without any outside help.

The take home part is due on Thursday May $9$th$,2024$ at $3$:$00$pm which is also the time you come to take the first part of the final exam.

You are working for an IT consulting firm eSolution. A mid$-$sized company recently hired eSolution to examine the security aspects of the entire operations of the company and they asked eSolution to help develop the industry standard security measures and various policies that protects company's information and operations security. The following describes the operations of the company:

$1.$ The Company provides a range of high$-$tech products to its customers in US$.$

$2.$ The headquarter and manufacturing facility are located in one location in Boston and there are sales offices in multiple cities in US$.$

$3.$ The company uses a website for its customers to obtain product information and to place orders.

$4.$ The company also allows customers and employees to use wireless devices to connect to company's web server.

$5.$ The company maintains a database to store data about its customers, products, pricing and sales as well as trade secrets and intellectual properties etc.

$6.$ The company has an email server to handle emails.

$7.$ Confidentiality, integrity of products design and pricing are extremely important and only employees with security clearance can access these information.

$8.$ The company has an intranet to handle communications and operations within the company. Network security is extremely important to the company. One of the purposes of hiring eSolution is to get recommendations about how to secure the company network environment so that it can withstand cyber attacks.

$9.$ The information transmitted over the intranet and internet must be secured $($encrypted$)$

$10.$ The web server, database server and email server must be available $24/7$ for customers and employees.

$11.$ Majority of the employees are not technically proficient, have minimal training in information security and they are not likely to read a document that exceeds a couple of pages in length.

$12.$ The headquarter and the manufacturing facility are in a large building that has a security station manned by a guard $24$ hours a day.

$13.$ Each employee is issued a photo ID badge with a magnetic stripe. The facility has a card reading system that can determine if an employee is authorized to access the facility during specific time periods.