In order to begin this project, an appropriate business must be selected with which you are familiar; this includes a prior or current workplace. The objective of this project is to analyze, design, and plan to implement a secure enterprise information system.
Once a business is chosen, you will research and identify security threats, risks, vulnerabilities, and flaws in the current IT enterprise information system. You can choose to focus on a particular system and/or application and must identify the components included in your project scope. A complete literature review will accompany the security plan to determine appropriate security solutions. In addition to peer-reviewed research, you must identify appropriate security and industry standards that are relevant to the organization. This must include appropriate best practices that must be followed and be used as a guide in designing the enterprise security policies and secure solutions.
After security policies and solutions to risks, threats, and vulnerabilities are researched and analyzed, you will develop an appropriate enterprise security design for the information system. The plan will cover the breadth of IT security from physical to operations security. A layer by layer approach must exist from the host and network to the security frame (e.g. authentication, sensitive data, session management, exception management, auditing, logging, etc.). Examples of more narrowed entities that must be present in a security frame include hardening techniques such as cryptography, encryption, firewall rules, access control lists, and/or input validation. These are just examples; the plan will include the breadth of what is necessary to secure the particular enterprise information system you have chosen.
The successful final project will be comprised of a minimum of 25 pages in current APA format. This includes at least 15 pages of appropriate literature review, research, and design with another 10 pages of proper diagrams. This is merely a minimum and additional pages may be necessary to develop an appropriate secure enterprise design. This project must also contain 10 peer-reviewed sources. In order to be graded, the project must be completely original and contain screenshots from your computer.
