Riordan Security Assessment Week 5

SR-rm-013 Initial Physical, Network, and Web Security Assessment

CGMT 441

26 November 2012

SR-rm-013 Initial Physical, Network, and Web Security Assessment

Riordan Manufacturing is a global plastics manufacturer employing 550 people with projected annual earnings of $46 million. The company manufactures plastic beverage containers at its plant in Albany, Georgia, custom plastic parts at its plant in Pontiac, Michigan, and plastic fan parts at its facilities in Hangzhou, China. The company's research and development is done at the corporate headquarters in San Jose. With the rising number of network security breaches in corporate America, Riordan manufacturing wants to assure its investor’s that their reputation, sensitive data, and overall capital investment is secure because network infrastructure security is a top priority.

To that end, Riordan Manufacturing has solicited K.E.A.R. Consulting to conduct an overall network assessment of the four company facility locations. The assessment is focused on four areas of concern, physical and network security, data security, and web security. While inspecting each of these areas, the Riordan management team desires an overall assessment of network security concerns and vulnerabilities. The management team wants recommendations from K.E.A.R. Consulting on ways to address any issues that can mitigate threats to the network or harden the network infrastructure.

This report will detail the observations and assessment of the Riordan Manufacturing IT security infrastructure at the company’s four facilities. The first section will review the physical security practices at the company. Next, the report will discuss the operational security practices observed across the company’s locations. The report will then review the K.E.A.R. team’s assessment of the Riordan Manufacturing data security situation. Finally, the report will examine the web security policies and practices at each Riordan site.

Physical...