In an IT infrastructure, domains there can be many threats that can take down your system. There is a threat out there that can harm our system, which we need to address. I feel that our system can be improved for better security and be protective from outside threat. This report is to inform you of the domains that can be affected by outside threat. In addition, people should know when dealing which company property and data that there no room for error. Next to properly handle company data when dealing with customer information. I feel that educating our employee would cut back on human error and keep the data safe. User domain can be defined, as the access point was the person meets the computer. The person can access the system through this point depending on the level of access that have. We would need to put in an “Acceptable Use Policy” it would give the employee the information on how to handle company assets. Now there would be certain measure to where we give access to employee, but that would be handling in the hiring process. With this information, the employee would be responsible for his or her action when handling sensitive data. That would ensure that company data would be safe when an employee logged on to the system. The User Domain is the weakest access point and employee should understand that. Next is the “Workstation Domain” is the device to where a user can access the company system. Only employees with the right access should be using these computers. Each workstation should have its own level of security so people with the right access can access them. Each employee should be held responsible for their workstation because they are put in charge of that device. If a workstation is unsecure, it can leave a whole network vulnerable to major threat. Then we have "System/ Application Domain" and this system has mission critical system and application. This domain must have high-level security and should only be given to high-level employee. These system and application would most likely be target by hacker. This level of security requires the most education for an employee. The employee must know and understand the measure between for access is granted.

As you can see, there is a lot of room for improvement in our system security. There are many threats that could take down our system and we should review and angle. I highly stress that you take the assessment seriously because knowledge is key to our success.