Wireless Network Security Overview

This assignment delves into the critical realm of wireless network security. It examines various aspects, such as types of wireless networks, common vulnerabilities, potential threats, risk management techniques, and essential security protocols. The document emphasizes the importance of implementing robust security measures to safeguard sensitive data and ensure reliable communication in wireless environments.

STP Limited
Networking & Communication Project
10/11/2017

STP Limited
Table of Contents
Overview.....................................................................................................................................................3
Background of the Project...........................................................................................................................3
Scope of the Project.................................................................................................................................4
Goals and Objectives...............................................................................................................................4
Strategic Alignment.................................................................................................................................4
Management and Security of the Networks.................................................................................................7
Security Solutions: Branch Office...........................................................................................................8
Data Security...........................................................................................................................................9
Security of Mobile Devices...................................................................................................................10
Plan to be Used for Hardware Purchases...................................................................................................11
Business Continuity...................................................................................................................................12
Risk Management......................................................................................................................................13
Strategy.................................................................................................................................................13
Identification.....................................................................................................................................13
Responsibilities and Accountability...................................................................................................13
Assessment and Analysis...................................................................................................................14
Suitable Strategy................................................................................................................................17
Treatment Methods............................................................................................................................17
Monitoring, Tracking and Review.....................................................................................................17
Conclusions...............................................................................................................................................17
Recommendations & Evaluations..............................................................................................................18
References.................................................................................................................................................20
2

STP Limited
Executive Summary
STP Limited is an Australian company that is expanding to include new set of services and
operations. The company has decided to improve its networking and communication mediums
that are being used.
The report has been prepared to analyze and understand the associated networking and
communication requirements along with the various details. The report covers the project
background, scope, objectives and strategic alignment. Analysis of network, data and mobile
security along with risk management strategy, business continuity steps and plan for hardware
purchase has been covered as well.
3

STP Limited
Overview
STP Limited is an Australian manufacturer of cabinets and these cabinets are made in a factory
that is owned by the company. The headquarters of the company are located in Wollongong and
there are three other office locations as well in Sydney, Bathurst and Lithgow. The most recent
out of all is the office that is located in Sydney and there are computerized mechanisms in place
in this office for the manufacturing of cupboard and drawer fronts. Some clients have the
capability to install these fronts on their own while other needs them to be installed by the
company representatives. It is being considered to make use of vans for the purpose of
installation which may be owned by the company or another franchise. With the current office
arrangements and infrastructure, the recent expansion of the office and business activities can no
longer be managed correctly. There are many changes that are being done in the organization in
terms of the implementation of the website, updates in the information system, new customer
management and accounting system along with improved stock control system. There are
distributed databases that are used in STP Limited. The organization is now looking to work
upon the improvement in its networking and communication channel.
Background of the Project
The company is working on the initiatives to enhance its network architecture and the
communication framework that is followed. There are a number of tools and new techniques that
are already in place in terms of the networking architecture of the company. There are a lot many
tools, gadgets and equipment that are being used and are present in the company in all of its
office locations. All the four office locations are connected and equipped with the Internet
through the ADSL connection. The company has also implemented the Bring Your Own Devices
(BYOD) strategy and scheme in the organization which provides the permission to the
employees to carry and use their personally owned devices for the fulfillment and execution of
the organizational activities.
Communication is the key to the success of the projects and the organizations. It is necessary for
STP Limited to ensure that the internal and external stakeholders associated with the company
are offered updated details and enhanced information sharing at any hour of the day. With the
4

STP Limited
advancements that will be done in regards to the communication framework, there will be a
number of advantages that will be offered to the company. These benefits will be in the form of
enhanced information sharing and streamlining of the process of information management. The
customers always look for the organizations that may provide them with the details on services
being provided at a non-stop basis and the ones that are readily available for the resolution of the
queries1.
Scope of the Project
The scope of the project that will be implemented for STP Limited will include the activities and
phases that will assist the deployment of the advanced networking and communication channel.
The requirements that are associated with the networks and communication systems shall be
analyzed so that the upgrades and modifications that need to be done are highlighted. The
planning shall then be carried out in terms of the networking design and architecture and the
changes to be developed. The network integration and compatibility checks, implementation and
testing will come under the scope of the project.
Goals and Objectives
 Advanced and assured integration of the four locations and all of the warehouses of the
company as a single unit in terms of the execution of operations and information
management.
 Setting up of the security of the networks and communication mediums that are designed
to make sure that the information and communication channels are secured and
protected2.
 Improvement in the quality and cohesiveness of the services that are provided to the
customers.
 Increase in the levels of the customer satisfaction and customer engagement with the
company.
1 Cisco, "Wireless and Network Security Integration Solution Overview", in , , 2008,
<https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/secwlandg20/
sec_wireless_overview.pdf> [accessed 11 October 2017].
2 R Pareek, "Network Security: An Approach towards Secure Computing", in , , 2011, <https://www.rroij.com/open-
access/network-security-an-approach-towards-secure-computing-160-163.pdf> [accessed 11 October 2017].
5

STP Limited
Strategic Alignment
Parameter/Attribute Details & Description
Strategies and Decisions  STP Limited is a company that is
making a lot many changes in its
current architecture and infrastructure
so that the quality of the services that
are provided to the customers improve.
The primary goal of the company is to
improve the customer services and the
business operations that are carried out
in the organization. The project will
serve the same purpose as it will ensure
that the network architecture is
enhanced which will lead to the
improvement of the communication
mechanisms and networking mediums.
 Many of the activities that will be
performed under the domain and scope
of the project will make sure that the
organizational objectives and goals are
met without disturbing the productivity
and continuity of the business
operations3.
 There are security protocols and
mechanisms that are involved in the
project which will make sure that all of
the information sets are protected and
the privacy is maintained.
Technical Potential of the Solution  There are many networking protocols,
3 C Gomes & M Yasin, "Toward promoting effective strategic performance: the relevance of the alignment of
performance measurement and competitive strategic choices", in International Journal of Business Excellence, vol.
12, 2017, 329.
6

STP Limited
devices, gadgets and equipment that
will be launched to be used in the four
office locations of STP Limited. These
components will be based on the latest
security and technical aspects and there
will not be any issues around
compatibility of these components with
other tools.
 The project will be feasible from the
technical point of view as it would be
compatible with the rest of the tools
and there will be enhanced integration
that will be involved.
Competitive Gains  The organizations and firms that are
ahead of their competitors in terms of
the use of technology gain an edge in
the market and among the customers.
The same will happen in the case of
STP Limited with the use and
implementation of latest networking
practices4.
 The quality and the performance of the
business operations and activities will
improve. This will lead to the better
operational continuity along with the
better satisfaction of the customers.
Service Level  The management resources and the
senior leadership that is associated with
STP Limited will decide upon the
approach and methodology that shall be
4 T Chi, "Alignment between business environment characteristics, competitive priorities, supply chain structures,
and firm business performance", in Strategic Direction, vol. 26, 2010.
7

STP Limited
used in the project. It will ensure that
the project goals and the service
excellence are achieved.
 The resources that will be used in the
project will be allocated as per their
skills and knowledge. An analysis of
their skill sets will be done which
would make sure that the project tasks
are successfully completed.
Management and Security of the Networks
There are many risks and security attacks that may take place in association with the networks.
This has led to the development of a discipline called Network Security. This has become one of
the integral parts of the organizations so that the security of the organizational networks can be
ensured. With the use of different types of networks along with the increase in the number of
networks involved, the likelihood of the network attacks has also increased.
There are many activities that are carried out in STP Limited. This has led to the setting up of
different teams and departments. There is also the presence of local IT support and services
department for the reporting and resolution of the IT related incidents. The management must
analyze and make sure that there are enough resources present in this department for the easy and
smooth execution of the services5. There are technologies that have been developed that shall be
used for remotely managing the support and maintenance tasks. Enhanced form of control and
monitoring shall be carried out by network administrators and managers along with the security
team to keep a track of all the technical and operational issues for their avoidance and
prevention.
With the increase in the frequency of the security risks and attacks, there are many different
protocols that have been developed and implemented in the company. The use of web and cloud
computing is also necessary in the current times. To avoid the associated risks, the company
5 R Sampangi, "A Security Suite for Wireless Body Area Networks", in International Journal of Network Security & Its
Applications, vol. 4, 2012, 97-116.
8

STP Limited
makes use of secure HTTP, Server Socket Layer (SSL) and many other protocols for the security
of the network and transport layers.
The offices of STP Limited are located and have been set up in four different locations. It is
important to ensure that the security of the offices and the information sets that are associated
with each office are maintained and protected. Due to this reason, an integrated networking
scheme is required to be implemented so that the network security and the tracking of network
activities become easier and easy to implement.
Secure routing is also one of the prime necessities of the networks and networking operations
that are carried out in the organization. With the aid of this practice, the data packets that will be
transferred from one location to the other will be done securely and with enhanced for of
protection as well. This will also eliminate nay necessity to install the security tools and gadgets
separately for all the four locations.
The types of the network security attacks are not constant. There are newer forms of network
security attacks and risks that are being created and launched by the attackers. Also, there are
many changes that are being done in the form of the existing security attacks. Due to the
changing form of the threats that are involved, it is very essential to ensure that the controls that
are implemented are not static. Currently, the controls that are being used are signature based in
nature. These controls do not have the potential to manage and track the threats that are not
known in advance6.
It is, therefore, required that the controls are developed and implemented in such a manner that
they are reactive in nature. These controls shall have the ability to handle the dynamic nature of
the threats and shall be ad-hoc so that the changes in terms of the type of the threats are handled
carefully and correctly.
Security Solutions: Branch Office
STP Limited has its branch office that is located in Wollongong. There are many security
controls and threats that are associated with the branch office and there are security controls that
shall be implemented in the branch office as listed below.
6 J Canavan, "Fundamentals of Network Security", in , , 2001, <https://whc.es/Network/Fundamentals%20of
%20Network%20Security.pdf.1.pdf> [accessed 11 October 2017].
9

STP Limited
 Virtual Private Networks (VPNs) shall be used in case of the branch office. This will
improve the end to end connectivity and security of the branch office and all the entities
connected with the branch office. The security of the overall office and the business
activities will be improved with the aid of the VPN connections.
 The use of internet connection is a necessity in every sector and organization. The same
is the case with STP Limited. The security of these connections shall be improved and
enhanced with the aid of the security tools and protocols at the internet layer.
 The set of the services that are associated with the company can be divided in different
types, such as, internal activities, core services and external activities. All of the core
services are carried out in the branch office. The security of these services shall be
improved by making use of logical and administrative controls7.
 It is necessary to make sure that all the information sets that are present in the application
are secure and the reliability of the operations is also ensured.
Data Security
 Virtual Private Networks shall be used in case of the branch office. This will improve the
end to end connectivity and security of the branch office and all the entities connected
with the branch office. The security of the overall office and the business activities will
be improved with the aid of the VPN connections8.
 Encryption is one of the most important and necessary aspects that are involved and
associated with the information and data sets. There are many encryption algorithms that
are present which shall be used in case of STP Limited. Some of these encryption
protocols include advanced encryption and triple DES.
 Firewalls are being used since a long period of time. These are the data security controls
which are normally installed at the network layer to verify the authenticity of the traffic
and to grant permission only to the traffic that is passed on these authentication checks.
However, the installation of the firewalls only at the network layer is not sufficient from
7 S Alabady, "Design and Implementation of a Network Security Model for Cooperative Network.", in , , 2009,
<http://www.iajet.org/iajet_files/vol.1/no.2/Design%20and%20Implementation%20of%20a%20Network
%20Security%20Model%20for%20Cooperative%20Network.pdf> [accessed 11 October 2017].
8 M Joshi & R Karkade, "Network Security with Cryptography", in , , 2015,
<http://www.ijcsmc.com/docs/papers/January2015/V4I1201544.pdf> [accessed 11 October 2017].
10

STP Limited
the security point of view. It is required to install firewalls in other layers as well so that
the overall security and access control can be implemented. There are many vendors that
have created and launched their advanced firewalls in the market. These shall be analyzed
and used by STP Limited to make sure that the network security along with data security
is maintained.
 The use of firewalls is a basic step and mechanism for the maintenance of security in the
organization. There are many forms of risks and attacks that have been created by the
attackers which cannot be controlled with the use and implementation of firewalls. It is
therefore required to make sure that the advanced access control is used and implemented
with the use of latest network security tools and protocols. Many of the data related
security controls are also present and have been implemented so that the security of the
information sets is maintained9.
 Filtering as the name suggests is a security control which is done with a view to filter the
traffic on the basis of clean and suspicious traffic. There is URL and web based filtering
techniques that have been developed for making sure that the unwanted and suspicious
traffic is avoided. There are many Business Intelligence tools that have also been set up
for the same purpose which can be used for the enhancement of the security of the data
sets and the networking mediums10.
 The information and data sets that are associated with STP Limited shall be divided and
classified in different categories. These categories shall include the division of the
information as per the type of the information which may include internal data, security
logs, sensitive information, confidential details and likewise. The data security protocols
that are developed shall be done according to these information categories only.
Security of Mobile Devices
Mobile devices are being increasingly used in the business units for the execution and
accomplishment of the business tasks and activities. The use of these devices cannot be ruled out
any longer since they serve many of the business necessities and operations. However, with the
9 M Strebe, "Network Security Foundations", in , , 2004,
<https://imcs.dvfu.ru/lib.int/docs/Networks/Security/Network%20Security%20Foundations.pdf> [accessed 11
October 2017].
10 M Soriano, "Information and Network Security", in , , 2011,
<http://improvet.cvut.cz/project/download/C2EN/Information_and_network_security.pdf> [accessed 11 October
2017].
11

STP Limited
use of the mobile devices, there are many security risks and attacks that take place in terms of the
loss of device, breaching of information that is present in these devices, unauthorized access to
the device, denial of service and malware attacks and many more.
It is necessary to follow certain steps and procedures for maintaining and assuring the safety of
the mobile devices and platforms.
 Fingerprinting: This is a technique in which a complete review and analysis of the
mobile device is carried out. In this process, the information on the mobile device type,
the security status of the device, browser and applications being used in the device,
device version and its security scenario and many more information are gathered. This
information is then analyzed from the point of view of the security of the organization or
the party in which the device will be used11.
 Network Access Controls: There are many automated tools and applications that have
been developed which may be used for controlling the access to the networks that are
connected with the mobile devices that are connected with STP Limited. These controls
and measures include the use of network based intrusion detection systems that are
equipped with data analytics tools to study the patterns being followed by the intruders.
There are also anti-denial tools and anti-malware tools that are used which can be used
for controlling the access of the networks and the traffic associated with the same.
 Authentication: Many new forms of authentication and associated protocols for the
enhancement of security shall be used in case of STP Limited. These authentication
measures shall include the use of multi-fold authentication systems and schemes12.
Plan to be Used for Hardware Purchases
There are many hardware and tools that will be required for the execution of the services and
networking operations in association with STP Limited.
 Computer Systems: Computer systems will be required for the occurrence and execution
of many of the project activities. These activities will include integration of the networks
11 M Souppaya, "Guidelines for Managing the Security of Mobile Devices in the Enterprise", in , , 2013,
<http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-124r1.pdf> [accessed 11 October 2017].
12 M Sujithra & G Padmavathi, "Mobile Device Security: A Survey on Mobile Device Threats, Vulnerabilities and
their Defensive Mechanism", in , , 2012, <http://dl.icdst.org/pdfs/files/35dc646a4630971fd27c6b2d32661555.pdf>
[accessed 11 October 2017].
12

STP Limited
and the design of their architecture, development of the networks and the design of the
security tools and protocols will also be done by making use of these computer systems.
 Servers: Many servers will be essential for the connectivity and execution of the
development methods and processes. These servers will include web and database servers
along with networking and communication mediums.
 Peripheral Equipment: A number of external components and peripherals will be
necessary for the establishment of the network connections along with the
communication tools and protocols. These peripherals will include networking equipment
and tools, such as, routers, bridges, hubs, gateways, network interface cards, modems and
switches.
 Simulators and Emulators: The testing of the networks that will be developed will not be
possible to be carried out on the different gadgets and mobile devices. It will be necessary
to have a virtual medium to experience the environment of such devices and to test the
network and communication mediums on the same. These tools will be of great aid for
the execution of such tasks and activities.
 Diagnostic Equipment: Troubleshooting will be necessary to understand the functioning
of the networking and communication operations. These equipment and tools will be
used for the same purpose.
 Communication Devices: Tele-communication is one of the most significant operations
that will be performed by the networking and communication channels that will be
developed. There are devices that have been set up for this purpose which include the
tele-communication devices and mediums.
Business Continuity
The use of mobile and computing devices cannot be ruled out any longer since they serve many
of the business necessities and operations. However, with the use of the mobile devices, there are
many security risks and attacks that take place in terms of the loss of device, breaching of
information that is present in these devices, unauthorized access to the device, denial of service
and malware attacks and many more. There are many risks and security attacks that may take
place in association with the networks. This has led to the development of a discipline called
Network Security. This has become one of the integral parts of the organizations so that the
13

STP Limited
security of the organizational networks can be ensured. With the use of different types of
networks along with the increase in the number of networks involved, the likelihood of the
network attacks has also increased.
All of these risks can have a negative impact on the continuity of the business tasks and
operations. There are measures that need to be taken to make sure that the risks are avoided and
the continuity of the business activities are maintained.
 Disaster recovery plan must be developed for STP Limited. This plan shall be created
after analyzing and identifying all the possible risk areas and the occurrences of the
security attacks that may take place in these areas. The plan must focus upon the
measures that shall be adopted for minimizing the damage and to minimize the downtime
of the services that will be impacted in case of a security risk or an attack.
 Backup of the data sets is also extremely essential to make sure that the security risks and
attacks are avoided. The data backups must be taken by setting up the schedule as
automatic. The data will be captured and will be stored in the repositories. This will
ensure that any of the security incident and attack on the data sets does not impact the
availability of the data for the company.
 The management must also carry out reviews and monitoring methods for the security
and maintenance of the data protection. These shall include conduction of reviews,
inspections and walkthroughs.
Risk Management
There are many components and entities that are involved with STP Limited, such as mobile
device, technical systems and tools, network connections, databases and many more. The use of
the devices cannot be ruled out any longer since they serve many of the business necessities and
operations. However, with the use of the mobile devices, there are many security risks and
attacks that take place in terms of the loss of device, breaching of information that is present in
these devices, unauthorized access to the device, denial of service and malware attacks and many
more. There are many risks and security attacks that may take place in association with the
networks. This has led to the development of a discipline called Network Security. This has
become one of the integral parts of the organizations so that the security of the organizational
14

STP Limited
networks can be ensured. With the use of different types of networks along with the increase in
the number of networks involved, the likelihood of the network attacks has also increased.
These risks need to be managed by a suitable strategy.
Strategy
Identification
All the security risks and other forms of risks associated with STP Limited shall be analyzed by
making use of the data sources and the information gathered from these sources. The identified
risks shall be listed down13.
Responsibilities and Accountability
Every risk will have a resource that will be have the prime responsibility for the handling of the
risk. The list of the identified risks shall be mapped with these stakeholders and responsible
resources.
Assessment and Analysis
The following risk register has been prepared after analyzing the risks that may take place in STP
Limited in association with the project and the suitable response that may be provided. There are
other factors such as description, probability and impact that are also included in the table.
Risk Description Probability Impact Response Strategy
Technical
Faults
There may be
failure of the
network ing
equipment
and gadgets
or the other
technical
tools being
used in the
The
probability
with this risk
in association
with STP
Limited is
medium.
The impact of
this risk in
association
with STP
Limited will
be medium.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk transfer.
13 H Berg, "Risk Management: Procedures, Methods and Experiences", in , , 2010, <http://ww.gnedenko-
forum.org/Journal/2010/022010/RTA_2_2010-09.pdf> [accessed 11 October 2017].
15

STP Limited
company.
Compatibility
Issues
There may be
issues with
the
compatibility
of the
technical or
networking
tools with
each other or
the other
components
used in the
company.
The
probability
with this risk
in association
with STP
Limited is
low.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance.
Operational
Errors
The resources
may bring up
the
operational
mistakes and
errors that can
have a
significant
impact.
The
probability
with this risk
in association
with STP
Limited is
high.
The impact of
this risk in
association
with STP
Limited will
be medium.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
mitigation.
Estimation
Risks
There may be
risks such as
schedule
overrun or
overrun of the
budget that
may come up
due to
The
probability
with this risk
in association
with STP
Limited is
medium.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance.
16

STP Limited
incorrect
estimations.
Quality Risks The quality
parameters
and standards
may not be
adhered by
the resources.
The
probability
with this risk
in association
with STP
Limited is
low.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance.
Security
Attacks on
the
information
sets
There may be
risks and
attacks that
may be
attempted by
the
malevolent
entities on the
information
sets and data
sets14.
The
probability
with this risk
in association
with STP
Limited is
high.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance and mitigation.
Network
security
attacks
There may be
risks and
attacks that
may be
attempted by
the
malevolent
entities on the
The
probability
with this risk
in association
with STP
Limited is
high.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance and mitigation.
14 R Debono, "Project Risk Management", in , , 2016,
<http://www.isaca.org/chapters11/Malta/Documents/Events/210416%20-%20Mark_Debono%20-
%20Understanding_Risk_in_the_Field_of_Project_Management.pdf> [accessed 11 October 2017].
17

STP Limited
networks and
connections.
Ethical &
Legal Risks
The ethical
parameters
and standards
may not be
adhered by
the resources.
These may
also lead to
the legal
punishments
and
obligations.
The
probability
with this risk
in association
with STP
Limited is
low.
The impact of
this risk in
association
with STP
Limited will
be high.
The risk needs to be handled
and managed by using and
implementing a suitable risk
response strategy. The
strategy and method that
shall be applied in case of
this risk shall be risk
avoidance.
Suitable Strategy
Every risk has been mapped with a suitable strategy that may be applied in case of the risk as per
the nature and type of the risk. The table shall show the risk management and security teams with
this information so that risks can be handled and managed correctly15.
Treatment Methods
There are various treatment methods and mechanisms that may be followed in the case of the
risks that identified and assessed. Some of these methods include risk transfer, risk avoidance,
risk acceptance and mitigation of the risks. These treatment methods shall be identified and
applied to every risk16.
15 L Crane, "Introduction to Risk Management", in , , 2013,
<http://extensionrme.org/pubs/IntroductionToRiskManagement.pdf> [accessed 11 October 2017].
16 Dcu, "Introduction to Risk Management", in , , 2015, <https://www.dcu.ie/sites/default/files/ocoo/pdfs/Risk
%20Mgt%20Training%20Slides.pdf> [accessed 11 October 2017].
18

STP Limited
Monitoring, Tracking and Review
The treatment methods shall be applied and the status of the treatment shall be tracked and
monitored by the security managers and the senior leadership of STP Limited. The progress shall
be reviewed and there shall be use of review tools and controls for this purpose.
Conclusions
STP Limited is an Australian manufacturer of cabinets and these cabinets are made in a factory
that is owned by the company. The headquarters of the company are located in Wollongong and
there are three other office locations as well in Sydney, Bathurst and Lithgow. With the current
office arrangements and infrastructure, the recent expansion of the office and business activities
can no longer be managed correctly. There are many changes that are being done in the
organization in terms of the implementation of the website, updates in the information system,
new customer management and accounting system along with improved stock control system.
The company is working on the initiatives to enhance its network architecture and the
communication framework that is followed. There are a number of tools and new techniques that
are already in place in terms of the networking architecture of the company. There are a lot many
tools, gadgets and equipment that are being used and are present in the company in all of its
office locations. Communication is the key to the success of the projects and the organizations. It
is necessary for STP Limited to ensure that the internal and external stakeholders associated with
the company are offered updated details and enhanced information sharing at any hour of the
day. The requirements that are associated with the networks and communication systems shall be
analyzed so that the upgrades and modifications that need to be done are highlighted. The
planning shall then be carried out in terms of the networking design and architecture and the
changes to be developed. The network integration and compatibility checks, implementation and
testing will come under the scope of the project. STP Limited has its branch office that is located
in Wollongong. There are many security controls and threats that are associated with the branch
office and there are security controls that shall be implemented in the branch office and other
three offices as well.
Recommendations & Evaluations
Network Security
19

STP Limited
 Validation and verification of the network security controls must be done on a regular
basis.
 The network activities and the logs associated with them must be reviewed and analyzed.
 The application usage must also be tracked continuously.
Infrastructure integration:
 A strong and successful integration must be set up for enhanced infrastructure.
 The components that are either obsolete or are not applicable to the organization must be
discarded.
 The activities carried out by the resources must also be tracked and maintained regularly.
Company’s Mobile Population
 The information on the mobile devices that are being used by the entities in the
organization must be reviewed and prepared.
 The employees that are spread over different locations shall also be analyzed and a list
must be prepared for the same.
WLAN Evaluation
 The number of connection shall be analyzed and reviewed.
 The support and maintenance work that is necessary for every connection must also
be understood.
 The evaluation of the security procedures and policies in association with these
connections shall be evaluated.
20

STP Limited
References
Alabady, S, "Design and Implementation of a Network Security Model for Cooperative
Network..". in , , 2009, <http://www.iajet.org/iajet_files/vol.1/no.2/Design%20and
%20Implementation%20of%20a%20Network%20Security%20Model%20for
%20Cooperative%20Network.pdf> [accessed 11 October 2017].
Berg, H, "Risk Management: Procedures, Methods and Experiences.". in , , 2010,
<http://ww.gnedenko-forum.org/Journal/2010/022010/RTA_2_2010-09.pdf> [accessed 11
October 2017].
Canavan, J, "Fundamentals of Network Security.". in , , 2001,
<https://whc.es/Network/Fundamentals%20of%20Network%20Security.pdf.1.pdf>
[accessed 11 October 2017].
Chi, T, "Alignment between business environment characteristics, competitive priorities, supply
chain structures, and firm business performance.". in Strategic Direction, 26, 2010.
Cisco, "Wireless and Network Security Integration Solution Overview.". in , , 2008,
<https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/secwlandg20/
sec_wireless_overview.pdf> [accessed 11 October 2017].
Crane, L, "Introduction to Risk Management.". in , , 2013,
<http://extensionrme.org/pubs/IntroductionToRiskManagement.pdf> [accessed 11 October
2017].
Dcu, "Introduction to Risk Management.". in , , 2015,
<https://www.dcu.ie/sites/default/files/ocoo/pdfs/Risk%20Mgt%20Training%20Slides.pdf>
[accessed 11 October 2017].
Debono, R, "Project Risk Management.". in , , 2016,
<http://www.isaca.org/chapters11/Malta/Documents/Events/210416%20-
%20Mark_Debono%20-
%20Understanding_Risk_in_the_Field_of_Project_Management.pdf> [accessed 11
October 2017].
21

STP Limited
Gomes, C, & M Yasin, "Toward promoting effective strategic performance: the relevance of the
alignment of performance measurement and competitive strategic choices.". in
International Journal of Business Excellence, 12, 2017, 329.
Joshi, M, & R Karkade, "Network Security with Cryptography.". in , , 2015,
<http://www.ijcsmc.com/docs/papers/January2015/V4I1201544.pdf> [accessed 11 October
2017].
Pareek, R, "Network Security: An Approach towards Secure Computing.". in , , 2011,
<https://www.rroij.com/open-access/network-security-an-approach-towards-secure-
computing-160-163.pdf> [accessed 11 October 2017].
Sampangi, R, "A Security Suite for Wireless Body Area Networks.". in International Journal of
Network Security & Its Applications, 4, 2012, 97-116.
Soriano, M, "Information and Network Security.". in , , 2011,
<http://improvet.cvut.cz/project/download/C2EN/Information_and_network_security.pdf>
[accessed 11 October 2017].
Souppaya, M, "Guidelines for Managing the Security of Mobile Devices in the Enterprise.". in , ,
2013, <http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-124r1.pdf>
[accessed 11 October 2017].
Strebe, M, "Network Security Foundations.". in , , 2004,
<https://imcs.dvfu.ru/lib.int/docs/Networks/Security/Network%20Security
%20Foundations.pdf> [accessed 11 October 2017].
Sujithra, M, & G Padmavathi, "Mobile Device Security: A Survey on Mobile Device Threats,
Vulnerabilities and their Defensive Mechanism.". in , , 2012,
<http://dl.icdst.org/pdfs/files/35dc646a4630971fd27c6b2d32661555.pdf> [accessed 11
October 2017].
22