Skip to main content

Titleabc123 Version X1it System Connection Tablecmgt430 Vers

Page 1

Titleabc123 Version X1it System Connection Tablecmgt430 Version 52un When securing the modern enterprise, consider that IT systems do not operate alone. Securing them involves securing their interfaces with other systems as well. It is important to know the different interconnections each system may have. Fill out the following table for four different IT systems. Note two enterprise systems they connect with and their connection type. Note two security vulnerabilities the connection may have and 2 to 4 ways each vulnerability could be potentially exploited. Some Comments: An example row has been entered into the table. This is only an example and should not limit what you do. Keep in mind that enterprise systems cover a certain task in the enterprise (HR, CRM, Identity Management, etc.). They are not the components of a system (such as servers). Connections can often be a direct connection/pipe, a file, a common database or something else. The vulnerability is what would make the connection vulnerable to an attack. The related risk is an attack that could target the weakness. Student Name: ________________________ IT System | Target System | Connection Type | Possible Security Vulnerability | Related Risk EXAMPLE | HR System | Identity Management System | Feeder File | File could be modified. User rights might not be correctly updated. HR System | Payroll System | API Integration | Insecure authentication | Unauthorized access and data theft HR System | Benefits System | Shared Database | Poor access controls | Data leakage or alteration CRM System | Email Server | SMTP Connection | Man-in-the-middle attack | Eavesdropping and data compromise Finance System | External Banking API | Web Service | Insufficient encryption | Interception of sensitive financial data


Turn static files into dynamic content formats.

Create a flipbook
Titleabc123 Version X1it System Connection Tablecmgt430 Vers by Dr Jack Online - Issuu