To: Boss
From: Cory Sanders
Date: February 24, 2014
Subject: Recommendations

There was a recent attack on the network. The attack was geared towards the application web server that the staff members use to acquire information about patients insurance including filing claims. The type of attack was a DOS attack. This attack could have been prevented if certain measures were implemented.
First and foremost, the network should have had the IDS systems that was bought implementing and integrated on the network. There were complaints about the IDS system but should not have been compromised for convenience. No security assets should have been compromised for the convenience. If the network was slow, the administrators could have looked into doing several measures. One is increase the bandwidth of the network to support all systems and functions. Ensure that we increase the bandwidth even for future expansion and added systems. This solution could be a fix for more than one issue. Two, configure a QOS policy on the network for critical applications such as the insurance web server. We should ensure that our most critical systems have priority on the network when it comes to bandwidth. This also helps bad latency that may hit during peak hours. Three, look at buying another type of IDS that wouldn’t demand so much bandwidth from the network. Before any system is brought and implemented on the network, we should have tested it in a trail version. Along with buying support from the company and have the vendor help integrate on the network that works best for us.
Now let’s get to the security faults that and controls that should have been taken. After the nurse was terminated, all of his administrator accounts should have been deactivated or removed. We should make sure that all known credentials that he encountered were changed. All keys should have been turned