IT Security for Revuelto Financial Services | Security Presentation - Mohamed Riham .pptx

The presentation addresses security concerns at Revuelto Financial Services, a financial institution that has suffered recent security breaches, resulting in reputational damage and a loss of client confidence due to data breaches and financial theft.

The document outlines:

Types of Security Risks: Including Unauthorized Access, Malware, Phishing Attacks, Denial of Service (DoS), Social Engineering, and Insider Threats.

Assessment of Current Procedures: Key weaknesses found are a lack of network monitoring, weak password policies, insufficient user training, outdated security software, excessive user privileges, and physical security weaknesses.

Technical Security Countermeasures: It highlights the benefits and security impact of proper firewall policies, third-party VPN configuration, Demilitarized Zones (DMZ), Static IP, and Network Address Translation (NAT).

Risk Management: The methodology for IT Security risk assessment involves identifying/classifying assets, analyzing threats/vulnerabilities, and evaluating existing controls. Risk treatment methods are also described: classify, avoid, transfer, mitigate, and accept.

Security Countermeasures: Actions to ensure Data Security include Data Encryption, Access Controls, Data Backups, and regular Security Audits/Penetration Testing. Actions for Operational Continuity include Network Security (Firewalls, IDS/IPS), System Hardening, User Education, and an Incident Response Plan.

Policy and Engagement: Revuelto's security policy covers strong passwords, data protection, reporting suspicious activity, secure networks, and physical security. It emphasizes that everyone—employees, management, and contractors—plays a role in cybersecurity (Stakeholder engagement).

Next Steps: Immediate actions proposed are updating firewall/VPN configurations and implementing monitoring; long-term steps include regular audits, improving policies, and engaging stakeholders.

1. IT Security for Revuelto Financial Services Mohamed Ansar Mohamed Riham 1028401 Security

2. Introduction Revuelto Financial Services is a trusted financial institution handling sensitive client information. Unfortunately, recent security breaches have compromised this trust. Data breaches and financial theft have led to reputational damage and a loss of client confidence.

3. Types of Security risks Unauthorized Access Malware (Viruses, Ransomware) Phishing Attacks Denial of Service (DoS) Social Engineering Insider Threats

4. Assessment of rfs security procedures Lack of Network Monitoring Weak Password Policies Insufficient User Training Outdated Security Software Excessive User Privileges Physical Security Weaknesses

5. Benefits of network monitoring systems Improved threat detection. Real-time monitoring of network activity. Identification of suspicious traffic patterns. Ability to investigate anomalies and potential breaches.

6. Security impact of incorrect firewall policies Firewalls act as a barrier between trusted and untrusted networks Incorrect configuration can leave vulnerabilities Overly permissive rules allow unauthorized access Overly restrictive rules can disrupt legitimate traffic

7. Security impact of third-party vpn misconfiguration VPN’s (Virtual Private Network) create secure tunnels for remote access Misconfigured VPN clients/servers expose vulnerabilities Weak encryption can be cracked, allowing data interception Lack of authentication exposes the network to unauthorized access

8. Security benefits of a demilitarized zone (dmz) Isolates public-facing servers from internal network Improves security by facing an additional layer of protection Public servers can be compromised without compromising the internal network Reduces attacks surface for internal systems

9. Security benefits of static ip Static IPs are fixed, unlike dynamic IPs assigned by DHCP Easier to monitor and manage specific devices Facilitates implementing security rules for specific IP addresses Useful for remote access and server management

10. Security benefits of network address translation (nat) NAT translates private IP addresses to a public address Protection internal IP addresses from exposure on the internet Reduces the attack surface for internal devices Can be used for network overload protection

11. IT Security risk assessment methodology Identify IT assets and classify them based on criticality (data classification) Analyze threats and vulnerabilities associated with each asset Evaluate existing security controls and identify gaps

12. Risk treatment methods Classify: Classify the risk high priority to Low priority Avoid : Eliminate the risk by removing the vulnerable asset. Transfer: Transfer the risk to avoid third party (cyber insurance). Mitigate: Reduce the impact of the risk ( implementing security controls). Accept: Accept the residual risk if the cost of mitigation outweighs the potential impact.

13. Security countermeasures to ensure data security Data Encryption: Protect data at rest and in transit ( SSL / TLS ). Access Controls: Restrict access to data based on the principle of least privilege. Data Backups and Disaster Recovery: Ensure data can be recovered in case of incidents. Regular Security Audits and Penetration Testing: identify and address vulnerabilities.

14. Security countermeasures to ensure Operational Continuity Network Security: Firewalls, intrusion detection / prevention systems ( IDS / IPS ). System Hardening: Security operation systems and applications with updates and patches. User Education and Awareness Training: Empower users to identify and avoid security threats. Incident Response Plan: Establishing a clear process for responding to security incidents

15. Revuelto’s security policy Strong Passwords & Data Protection Create complex passwords and follow data security protocols. Report Suspicious Activity Report any suspicious activity or potential breaches immediately. Secure Networks & Physical Security Use social media responsibily and safeguard physical access to IT equipment

16. Stakeholder engagement for security Everyone at Revuelto Financial Services plays a role in Cybersecurity. Employees – Trained to identify threats, use strong passwords, and report incidents. Management – Champions security, allows resources ,and leads by example. Contractors – Aware of security protocols and access limitations for RFS.

17. Organizational integrity Data Security – Ensuring data confidentiality, integrity, and availability. Operational Continuance – implementing disaster recovery plans and regular backups.

18. Conclusion Summary Risks : Unauthorized access, financial theft, malware. Countermeasures: Firewall / VPN configs, DMZ, Static IP, NAT. Data Security: Confidentiality, integrity, availability, encryption. Continuance: Disaster recovery, backups, testing, redundancy. Next Steps Immediate: Update firewall / VPN, implement monitoring. Long – term: Regular audits, improve policies, engage, stakeholders.

19. Thank you

20. References Anon., 2021. RSI Security. [Online] Available at: https://blog.rsisecurity.com/types-of-security-threats-to-organizations/ [Accessed 20 07 2024]. Anon., 2024. Fortra . [Online] Available at: https://www.fortra.com/blog/top-benefits-network-monitorings [Accessed 01 08 2024]. Anon., 2024. Linkedin . [Online] Available at: https://www.linkedin.com/advice/0/what-most-common-vpn-configuration-mistakes-bt28f#:~:text=DNS%20leaks%20can%20occur%20due,use%20a%20trusted%20DNS%20provider.&text=DNS%20leaks%20in%20VPNs%20expose%20browsing%20data [Accessed 01 08 2024]. Anon., n.d. Fortinet. [Online] Available at: https://www.fortinet.com/lat/resources/cyberglossary/network-address-translation#:~:text=One%20way%20that%20NAT%20can,a%20level%20of%20traffic%20filtering [Accessed 01 08 2024]. Anon., n.d. Fullerton. [Online] Available at: https://hr.fullerton.edu/risk-management/information-and-document-requests/information-management/essential-techniques-of-risk-management.php [Accessed 01 08 2024]. Anon., n.d. Ipstack . [Online] Available at: https://ipstack.com/definition-of-static-ip-address#:~:text=Static%20IP%20addresses%20can%20enhance,lead%20to%20improved%20network%20performance [Accessed 01 08 2024]. Anon., n.d. Kiteworks . [Online] Available at: https://www.kiteworks.com/risk-compliance-glossary/security-misconfigurations/#:~:text=Misconfigured%20Firewalls%20or%20Network%20Settings,-Firewalls%20and%20other&text=For%20example%2C%20if%20a%20network,gain%20access%20to%20the%20system [Accessed 01 08 2024]. Anon., n.d. Science Direct. [Online] Available at: https://www.sciencedirect.com/topics/computer-science/security-procedure [Accessed 29 07 2024]. Anon., n.d. Springer. [Online] Available at: https://link.springer.com/chapter/10.1007/978-3-540-70818-6_9#:~:text=Organizational%20integrity%20refers%20to%20the,results%20within%20a%20given%20organization [Accessed 01 08 2024].

21. References Babati , B., 2020. Hoxhunt . [Online] Available at: https://www.hoxhunt.com/blog/security-engagement#:~:text=Security%20engagement%20is%20a%20form,simulating%20real-life%20attack%20types [Accessed 01 08 2024]. BasuMallick , C., 2022. Spiceworks. [Online] Available at: https://www.spiceworks.com/it-security/network-security/articles/what-is-demilitarized-zone/ [Accessed 01 08 2024]. Lenaerts-Bergmans , B., 2023. CrowdStrike. [Online] Available at: https://www.crowdstrike.com/cybersecurity-101/types-of-social-engineering-attacks/ [Accessed 01 08 2024]. RiskOptics , 2023. Reciprocity. [Online] Available at: https://reciprocity.com/risky-business-risk-assessments-101/ [Accessed 01 08 2024]. Schedt ., A., 2023. Comptia . [Online] Available at: https://www.comptia.org/blog/what-is-a-countermeasure-in-computer-security#:~:text=Countermeasures%20often%20refer%20to%20a,confidentiality%20and%20availability%20of%20data [Accessed 01 08 2024].