Question

How would you evaluate the following risks that exist at Company X? How would you prioritize which of these risks need to be addressed first?

-Existing file servers are not being backed up

-Users keep post it notes with their login credentials under their keyboards

-Your network firewall is running an operating system that is 5 years old

-No antivirus software is deployed to desktop computers

-VPN access is not being logged

-Company X does not have an acceptable use policy

-Access to the finance system is shared by a common username and password by all employees of the business office.

Answer 1

Answer)

Below are the risks at the Company X which need to be addressed first

Access to the finance system is shared by a common username and password by all employees of the business office.

Company X does not have an acceptable use policy

No antivirus software is deployed to desktop computers

Your network firewall is running an operating system that is 5 years old

Existing file servers are not being backed up

The VPN access is not being logged

Note: Saving the data and making a backup will lead to protecting the data from any data loss, at the same time keeping the application and server and the anti-virus updated will help to prevent any data breach or hacking.

There should be a logged data to monitor is the access is authorized and to check is any suspecting network traffics.

If you like the answer, do hit like.
Hope this answer helps.
Thanks