1 of 14

Lesson 10 part 1 & 2

BOOKSTER, AN ONLINE BOOK COMPANY

2 of 14

Network and System Security

This is a three-tiered network architecture based on the needs of the business. It’s structured to provide the highest level of security to our operations, sensitive and resting data.
Our network is equipped with the latest IDS/IPS programing and a combination hardware and software solution firewall.

3 of 14

Application and Web Security�

OUR REMEDIATION ACTIONS:
Implementing strong password policies (multi-factor authentication)
Initiate least privilege access to system administrators and internal employees
Patch installations and configuration adjustments will be added as needed

4 of 14

Cryptography

Through data encryption, cryptography is used to encrypt data transmitted between our clients and servers over secure networks like SSL/TLS
For “data at rest,” cryptographic algorithms encrypt data stored on our servers, databases, and storage devices.
Cryptographic protocols and algorithms are used to establish secure communication channels between our clients and Bookster’s servers.

5 of 14

Incident Response:

The purpose of this Incident Response Plan (IRP) is to provide a structured approach for handling cybersecurity incidents to minimize their impact and ensure rapid recovery.

This plan applies to all employees, contractors, and third-party partners of the company. It covers all types of cybersecurity incidents including data breaches, malware infections, denial-of-service attacks, and unauthorized access.
Components of Bookerster’s IRP:

Incident Response Team (IRT)
Preparation (Trainings)
Incident response tools (SIEM System, IDS/IPS)
Policies and Procedures (Incident reporting policies, protocols)
Identification
Containment
Eradication
Recovery
Lessons Learned

6 of 14

Risk Management

The purpose of our risk management is to identify, evaluate, and mitigate cybersecurity risks to protect Bookster’s assets, data, and operations.

Asset Identification (Identifies and classifies all assets so we know what needs protected)
Asset Inventory: (hardware, software, data)
Asset classification levels (high, medium and low)
Threat sources (external – threat actors, internal – employees, natural events)
Vulnerability Assessments (identify weaknesses in our company )
Risk analysis, ratings, and risk acceptance

7 of 14

Cloud and Mobile Security

Cloud services risks

Data Loss/Stolen devices

What's our mitigation strategy?

Data Breaches

What’s our mitigation strategy?

8 of 14

Security Policies and Standards

This Security Policy establishes the framework for managing the confidentiality, integrity, and availability of Bookster’s information assets in alignment with the ISO 27001 standard.

This policy applies to all employees, contractors, and third-party partners who have access to the company's information systems.

9 of 14

The incident! �(Data Breach)

PHISHING ATTACK!

10 of 14

Technical Analysis

EXPLOITED WEAKNESS!

11 of 14

Incident Response and Risk Management:

INVESTIGATE

PARTNER UP

ACTIVATE THE CIRT

IMPLIMENT

TRAIN

12 of 14