Board Plan

Security Overview

(Aircraft Solutions)

Introduction

The following report concerns a security assessment of Aircraft Solutions (AS), a well respected equipment and component fabrication company, providing full spectrum design and implementation solutions to multiple industries, including the electronics, aerospace, commercial, and defense sectors. Aircraft Solutions employs a range of highly qualified professionals and houses an immense production plant, with an overall goal of providing high-quality solutions to accommodate specifications from a wide range of customer demands. My primary objective in this assessment is to identify the existence of vulnerabilities present within the global context of AS operations. To accompany the exposed weaknesses, an evaluation of the associated threats will be deduced, followed by an analysis of the degree of risk present. Lastly, consideration of the consequences resulting from the unfolding of potential threats will be given due attention.

Assessment

Of the three given areas of potential investigation pertaining to AS, i.e. hardware, software, and policy, careful consideration has narrowed my focus down to the areas of hardware and policy. More specifically, in the area of hardware, I find it very curious that there is no firewall implemented between the commercial division and the Internet. The Defense Department must be routed through Headquarters, but the Commercial department is connected straight to the Internet. This is a significant vulnerability. The second weakness I have pinpointed is the security policy stating router and firewall rule-sets should be evaluated every two years. Such a time span between rule-set evaluations is also a substantial liability to the continued and unimpeded success of the organization. Further elaboration of the identified security vulnerabilities is presented below.

Hardware Vulnerabilities

The issue pertaining to Aircraft Solution’s hardware weakness is that of the...