Information Security - Gordon Mediation LTD | Assignment

Running head: INFORMATION SECURITY ASSIGNMENT
INFORMATION SECURITY ASSIGNMENT
Name of the Student
Name of the University
Author Note

1INFORMATION SECURITY ASSIGNMENT
Executive Summary
Gordon Mediation LTD is a consultant company that assists various companies in order to
mitigate the issues. The company needs a security analyst in order to analyse the security and
threats and the vulnerabilities of the company. The report deals with the threats and the
vulnerability analysis of the company with the help of risk matrix and the mitigation of the
risks that arise in the company. Penetration testing also needs to performed on the traffic of
the company that helps to analyse the traffic and the packets. The report focuses on the
penetration-testing proposals that are to be provided to the manager. The proposal consists of
various types of testing and the phase’s of penetration testing that are to be done.

2INFORMATION SECURITY ASSIGNMENT
Table of Contents
Introduction................................................................................................................................3
Risk Assessment.........................................................................................................................3
Risk Remediation Plan...............................................................................................................3
Penetration Testing Proposal......................................................................................................3
Conclusion..................................................................................................................................3
References..................................................................................................................................4

3INFORMATION SECURITY ASSIGNMENT
Introduction
Information security is not only about protecting information from the access those
are unauthorized but information security is the practice of prevention of access those are
unauthorized, modification, or the destruction of information. The information can be
electrical or physical. Thus, the security of information spans over so many areas of research
like cryptography, cyber forensics and many more.
The report deals with an organization known as Gondor Mediation LTD that resolves,
mediates, and arbitrates HR and disciplinary issues for other organizations. The company
needs to assess its security of each of the procedures and areas in order to recognise and
manage the risks of cyber security. The report focuses on the risk assessment of the Gordon
Mediation LTD and discusses about the risk mediation plan. The report also has a brief
description about the penetration-testing proposal that is important for the company.
Risk Assessment
Risk assessment is utilised in order to describe the overall procedure where hazards
and factors of risk are identified that have the potential to cause harm (Kotzias et al 2019).
Various threats and vulnerabilities in Gordon Mediation limited should be assessed so that
they do not cause any harm.
Risk
Id
Risk
description
Impact Possibilities Score Risk mitigation
strategies
R1 Malicious
interference of
humans like the
hackers
Major 4 Possible 3 High 12 The networks of the
systems should have
proper antivirus and
malware protection so