Unit Code: -    CSI2102 

Unit Title: - Principles of Information Security 

Assignment Title: - Assignment 2:  

Introduction 

 In the Present scenario it rely heavily on the distribution scheme that ensure the security and integrity of the Dance club. The Recommendations will use the distinguish model to calculate what needs to implemented or alter in order to gain the classification of Information Security. In this Assignment, we gone through the case study. The security is one of the challenges for this Dance club. It is about the Security of the “The dance Club” (All Stars Dance) which is managed by the six staff of the Dance club and it has the 200 members registered. The dance club operated in a dance room situated on the second floor of the three-storey building. Dance club started at evenings between 6pm to 10pm. Dance club are connected with two networked computers on site and printer which is connected through the internet. The new members can join this club by register online on the web portal of the dance club website. In this report we have explained each asset identifies the weightage score. We have also calculated the impact of loss which is cause due to asset in the business.  The website of the Dance club is open source CMS. The most challenging work to secure the web portal from threat. Hackers Generally Stole the data from Web Portal. An SQL Injection vulnerability effect any web portal that uses the SQL database. Hackers Execute this SQL Injection for malicious SQL statements.

Information Security assessment and recommendation

1. The web portal and its CMS

There are various methods to protect the web portal and its Content management Systems secure. The details steps are discussed below: -

1. Vulnerability: - We know that there are many methodologies by which Content Management System can be Secure. It is more important to protect coding practices by certainly a logical first step. This is the area which we studied from many years in which expert insight for making improvement of web application security with no shortage. The threat modelling would be implemented to check clearly what the application is meant to do, check how the application goes and where the vulnerabilities are mostly to exits. Static Analysis keep tracks the logic of the code that is not running and looking for shortfalls of data manipulation and algorithms process before production of the application to be build.  ("SANS Institute: Reading Room - Data Loss Prevention", 2019)
2. Below are few of the rules for making strong security of the website are as follows: 
3. Select your plug-ins wisely
4. There must be update with urgency.
5. Always choose your Content Management Systems with keep in mind about security and functionality.
6.  Always changes the sources code and track every time.
7.  Always use strong password.
8.  Limit the types of file to uploads to non-executables and always keep track them closely.

Asset Identification

Weightage Factor Analysis

 The Weightage factors has been opted to give the numerical value to the asset’s impact on the Dance Club. The first factor is taken on the basis of the payment of the third party and employees. The second factor is based on the maintenance cost to make the customers attractive towards the Dance club. The third factor has been chosen on the basis to optimized the unnecessary expenses on the Dance club. ("Whitman, M.E. and Mattord, H.J. (2012) )

Schema Classification of asset

The classification schema is the technique of gathering information which is applied on the schema. The Dance club is small business so the information stored at this organization is very small. The three-classification schema is explained below which his used on the asset.

1. Internal:  There should be banned of carrying the printing materials inside the Dance club If Any members carry any printing material then there must be clearance from Staff of the dance club.
2. Public: - Any information Posted on the web Portal must be gone through the process of clearance by the Dance club management. The management must to follows the strict rules in order to ensure the Sensitive information.
3. Confidential: - Database storage systems are more sensitive regarding all the information types. It needs to configure initially and make backup it in secure location.

Asset Threat Identification

Risk Impact (Likelihood x Impact Matrix)

Risk Management is one of the important parts of any organizations. Any Aware admin need to aware about these types of risks. To prioritize risk, need to do effectiveness and focused the majority of time and take more efforts on the important risks.  A risk always a negative impact. But the size of the impact varies with respect of impact health, time, human life and some other factors. Below the Likelihood impact factor is mentioned for each asset.

Final Recommendation

It is very important that Dance Club has to implement various key countermeasures. It is also important that in the organization only single staff has authentication to access all the data policies. The manager has authentication to access all the confidential data of the members. The Organizer Manger has only authentication to out the event details on the web portal.  To protect from loss of data the web portal should be secure so that the attacker can’t theft any data of employees and misuse it. The latest technology must be used in the Dance club. If any Employee has been out from the company then the Management have to revoked him immediately. (2019)

Executive Summary

The Aim of this report to gain the different options that will directly protect the confidentiality of the members information and security of his physical appearance. The Various risk has been discussed above and the potential threats of each assets are listed in table. The Result of the Information security systems analyzed are used then developed the action along with the recommendation of the physical device which is to be installed inside the building and inside Dance Club room. The impact of the various asset was discussed above. The risk rating of asset and counter measures was explained. The report is finalized with certain recommendation for the dance club to gain the integrity and confidentiality of the Personal information of the registered members.