Your CISO was very happy with the recommendations that you made in

Week 3. They have accepted your recommendations as valid, but have

requested additional information on the firewall solution. The CISO is

now asking for:

1. Firewall best practices that you will implement to ensureconfidentiality, integrity, and availability (CIA, page 6, first mentionin textbook).
2. The best firewall to support his requirement for detailed logging.
3. The firewall type.
4. Your plan for managing it. my week 3 answer
   Systemsecurity is one of the major security threats in many organizations.Every organization nowadays store s important information in theirinformation system due to the development of technology. Net sec is oneof the major companies in Australia which deals with the sale ofelectronic devices. All payment and transactions with customers andsuppliers are undertaken through the online platform. As a result,important information is uploaded through the online platform. Recentlythe company has been experiencing security threats in the informationsystem which may jeopardize the nature of operations within the company.Due to the increase on the security threats in the networkinfrastructure the chief information system officer authorized me toconduct a review on the network infrastructure to ensure that the entiresystem was safe.Afterconducting a review on the network infrastructure, I was able toidentify a few mistakes in the system. One of the major mistakes wasthat the security of both hardware and other peripheral devices was notconsidered. The areas in which the devices were located were not secureand any one could gain access to them and manipulate the system. Inaddition, the organization did not have quality measures that limit thenumber of people who access the devices or the network infrastructure.The system lacked important security control measures such as passwordsin the system to limit unauthorized access (Almorsy et al 1609). Even an intruder could easily access into the organization system and access confidential information system.Theorganization also shares its network infrastructure with otherorganizations. Some of the resources are shared with more than onecompany. As a result, the company does not have confidentiality and isalways vulnerable to security threats. Employees in the organizationwork in the same position for many years without being rotated. This attimes in the recent past has led to unethical practices such as insiderdealings which is associated with conflict of interest. Due to manyhours in the same position, an employee knows every aspect of theinformation system and may be tempted to cooperate with outside partiesfor financial gains.Toensure that the entire network infrastructure is safe variousrecommendations are necessary. The management should ensure that thesystem is equipped with strong passwords to limit access (Pope et al 192).The passwords should be changed from time to time to limit insiderdealings. The company should also limit the number of people who areauthorized to access the network infrastructure devices. Everyone whoaccesses the devices should gain authorization from the chiefinformation system officer. Employees in the functional areas which dealwith the information system should be frequently rotated. Staffrotation ensures that no one is exposed to how the system works. Themanagement should also limit the number of people sharing the networkinfrastructure. It should ensure that the company only uses the networkinfrastructure.Tolimit intrusion important security control measures should beincorporated. One of the major aspects of the network system issafeguarding the assets of the company. It should be done throughinstalling security control measures that deployment of guards andimproving the parameters of the institution where the devices arelocated. The management should also consider fitting the networkinfrastructure of the company with important quality control tools suchas alarms. The respective alarms should be able to detect anyunauthorized access and generate alerts.Work citedAlmorsy, Mohamed, John Grundy, and Ingo Müller. "An analysis of the cloud computing security problem." arXiv preprint arXiv:1609.01107 (2016).Pope,Jonathan, Lewis Guignard, and Thomas Beale. "Identifying avulnerability of an asset of a network infrastructure to mitigate." U.S.Patent Application No. 15/338,192.

   < P

PLEASE MAKE SURE ANSWER IS 350 WORDS BUT NO MORE THAN 500