The perimeter network of an organization is the border line of its security. A breach of the security of the network can spell doom for any organization and could lead to total compromise of its network with impact on the confidentiality, integrity and availability of its information assets. Several network devices such as routers, switches, firewalls, intrusion prevention system (IPS), intrusion detection system (IDS), wireless controllers and access points, network access control system (NAC & TACACS+), links, are deployed for the smooth running of the network (i.e. routing of traffic from source to destination) while also ensuring network security. Baseline security configuration as well as standard operating procedures (SOP) for Administrators of the network are also required to ensure good security practices as well as security of the network. Also, original equipment manufacturers (OEMs) prescribe security baselines on how to ensure their devices are adequately protected while in use.
While these network devices ensure continued availability of services and solutions running on the network, there equally exist inherent vulnerabilities/risks associated with their use in addition to those available controls are not able to address (residual risk). Much of the risk/vulnerabilities are due to poor/substandard configurations, people (operators/administrators) supporting the systems and external factors (hackers) due to connection/exposure to the internet. As such, it important to promote good security practices and ensure that standard baseline configurations are enforced in the network.
The risk associated with network infrastructure would vary with organizations and largely depends on how the infrastructures were deployed. As such, it is important that personnel with security oversight responsibilities on network infrastructure put in context organization’s uniqueness in terms of its information security policies, procedures, security baselines, regulatory and legal requirements while conducting their security assessment or reviews to know how best to protect them.
This book is therefore a documentation of risks and vulnerabilities associated with network infrastructure (switches, routers, firewalls, wireless controllers, IPS/IDS, NAC/TACACS), threats and threat agents that could exploit those weaknesses, their impact on the organization and actions required to mitigate the risks. It serves as a risk assessment checklist/guide for risk assurance practitioners (IT Risk Manager, Cyber/Information Security Analysts, Information Systems Auditors and Systems Control Analysts) and enable them understand as well as identify some of the risks inherent in the network, implications/impact of such risks/vulnerabilities and ways to mitigate them. The book is a risk assessment checklist/program guide for risk assurance practitioners and provides unique/rich database of vulnerabilities/risk, control lapses, process failures and substandard practices associated with network infrastructure. This risk assessment checklist can easily be integrated with popular audit management software such as teammatessolutions or MKinsight.
Intended for organizations desirous of building a risk management program around their perimeter network infrastructure from the ground up or strengthen an existing one. Below are sample pages of the perimeter network infrastructure risk assessment checklist/program. For full access to the document, you can subscribe to our membership plan for full access to all risk assessment checklists available on our site (this inclusive) or purchase only this book by clicking the Buy Now button below.