IS 471 Policy Development and Security Issues
Lab 4 (Due October 22, 2014)
Introduction
In any company, a security policy helps to mitigate the risks and threats the business encounters. However, unless a company happens to be in the information security industry, the task of identifying, assessing, and categorizing the myriad of risks can be an overwhelming one.
Thankfully, a company’s IT infrastructure can be divided in a logical manner to more easily sort the risks. These divisions are the seven IT domains. The purpose of the seven domains of a typical IT infrastructure is to help organize the roles, responsibilities, and accountabilities for risk management and risk mitigation.
In this lab, you will identify known risks, threats, and vulnerabilities, and you will determine which domain of a typical IT infrastructure is affected. You will then discuss security policies to address each identified risk and threat within the seven domains of a typical IT infrastructure. You will next determine which appropriate security policy definition will help mitigate the identified risk, threat, or vulnerability. You will organize your results into a framework that can become part of a layered security strategy.
Learning Objectives
Upon completing this lab, you will be able to:
• Identify risks, threats, and vulnerabilities commonly found in the seven domains of a typical IT infrastructure.
 Determine which domain is impacted by the risk, threat, or vulnerability.
 Determine which domain is impacted by the risk, threat, or vulnerability.
 Determine security policies to address each identified risk and threat within the seven domains of a typical IT infrastructure.
Deliverables
Create a document encompassing both the hands-on steps of the assignment as well as the lab assessment questions and answers sections. The lab will be a group project that