Project for security audit on gns3

Abstract of the project: This project will require my IT security consultancy firm, ITSec Limited, to perform a security audit for a financial firm, FinAdven Limited, to improve their security posture. Cyber-attacks are on the rise and getting more complicated and sophisticated over time, many businesses are at risk of being hacked, especially financial firms. These threats can be external, malicious people trying to hack from the outside, and internal, malicious users within the company trying to steal data or cause damage to the business’s revenue or reputation. FinAdven Limited has requested ITSec Limited to perform a security audit of their network infrastructure in order to identify vulnerabilities, loopholes and breaches and thereafter provide solutions and recommendations to mitigate the vulnerabilities. ITSec will analyse their current network setup/design and run a vulnerability scan using one of the industry’s leading vulnerability scan tool known as Nessus. This scan will scan their networking devices as well as their servers and generate a report listing all vulnerabilities in the current network setup. ITSec will then present a report/document providing solutions to mitigate the vulnerabilities with whatever equipment is currently available and also making recommendations on the overall network design and new security equipment that the firm will need to purchase to better their security posture. Furthermore, the firm’s IT security policy and procedures, if any, will be analysed and improvements will be made if present, or these documents will be created if not present. A Cyber-awareness presentation will be put together and presented to the employees of FinAdven so that they all share the responsibility of keeping the firm secure. Project Deliverables: • Vulnerability Scan Report • Document listing all the flaws in the current network design • Document listing ITSec’s solution and recommendation to mitigate the vulnerabilities identified and improve/modify current network design from a security standpoint •Cyber-awareness presentation document Description of your artefact: The aim of this project is to improve the overall security posture of FinAdven Limited by utilising vulnerability scanning tool as well as ITSec’s consultants’ IT security knowledge, experience and expertise  ITSec will provide the solutions document as well as the Cyberawareness documents in an easy-tounderstand language, translating IT language into business language for senior management and plain simple language for users to absorb the information  Thoroughly identifying vulnerabilities and loopholes in the network is intellectual challenging as it requires the IT security consultant to think like a hacker. I will have to think outside the box to perform a thorough audit. What methodology (structured process) will you be following to realise your artefact? The security audit will be performed in accordance with the OSI model, testing security at all layers of the network  All networks are built from the ground up according to the OSI model so testing security at each layer provides a thorough audit. RESOURCES THAT MUST BE USED  Software o Nessus vulnerability scan software (free trial) o Cisco IOS images for routers, switches and firewalls o Microsoft Server and workstation OS editions  Server: Windows Server 2019  Client: Windows 10 Pro o GNS3