Question

Write a four-paragraph (1 to 2 page) executive summary covering the following topics: Paragraph #1: Summary of findings (risks, threats, and vulnerabilities found throughout the seven domains of a typical IT infrastructure) Paragraph #2: Approach and prioritization of critical, major, and minor risk assessment ements Paragraph #3: Risk assessment and risk impact summary of the seven domains of a typical IT infrastructure Paragraph #4: Recommendations and next steps for executive management

Answer 1

Seven domains can be found in a typical IT infrastructure. They are as follows:

1. User Domain,
2. Workstation Domain,
3. LAN Domain,
4. LAN-to-WAN Domain,
5. Remote Access Domain,
6. WAN Domain
7. System/Application Domain

Solution Para 1: There are several risks, threats, and vulnerabilities were found in a IT infrastructure situations that can put harm to any kind of system/application. these are the threats risks vulnerabilities like Unauthorized access from public Internet, User destroys data in application and deletes all files, Hacker penetrates your IT infrastructure and gains access to your internal network , Intra-office employee romance gone bad, Fire destroys the primary data center, Communication circuit outages, Workstation OS has a known software vulnerability and these have different different kind of access to the domains,

Solution para 2 : During project initiation meetings in an organization with the help of team members and stakeholders, identify risks. The best way to accomplish this is via including positive and negative results past experience. What has worked and what didn't? What made a prior risk a risk to begin with? Was the risk external or internal? Was the risk handled properly? Who handled the risk? to find an effective solution one must take the time to identify the active risks otherwise it's impossible to prioritize them after the initiation

Solution Para 3:

Risk management is known to be as a must have component to the successful attainment of organizational aim/goals since no firm makes without taking a risk. As such risk assessment and risk impact summary of the typical seven domains of an IT infrastructure is educative also in the effective management of risks begins with the understanding of the specific risks,threats and vulnerabilities. Amazingly risk assessment refers to the processes which are selective and effective in knowing the qualitative and quantitative analysis of risks. As such, it can foretell the risk impacts as well as the after-effects when they happen. Risk impact refers to the determination of the potential along with the evaluation of risks and the good things based on the assessment. For different domains like the WAN domain involves the risk assessment which demands the maintenance of a database for authorized individuals with proper security while the risks, for the user domain, the risk assessment process comprises the maintenance of authorized information of all the users in conjunction with the protection with implementing proper firewalls. The risk impact involves the manipulation and exposure of user information by a threat like hacker, like wise for other domains it is also done accordingly. The risk impact involves the exercise of vulnerability. Notably, the LAN-to-WAN domain assessment represents a protection layer with the greatest risk as well as uncertainty to an organization and the risk impact factor involves conducting a gap analysis.

Solution Para 4: Executive Management could go a long way towards making the federal government more competitive where it needs to be by increasing the flexibility of agencies to pay more in higher-pay areas and higher-pay occupations and to better performers. Following are some recommendations Recommendation 1: The pay reform provisions and related flexibilities provided by the Federal Employees should be increased in the favour of work assessment, Recommendation 2: OPM should follow its aggressive effort to delegate its authorities with an equally strong effort to see that authorities and flexibilities are decentralized to the appropriate levels within the departments and agencies. Recommendation 3: To help carry out employees responsibilities for encouraging, assisting, and overseeing the departments and agencies, also should develop an organizational focus for science and engineering personnel policy staffed by individuals who had experience as senior managers of scientists and engineers.