Identify possible network infrastructure vulnerabilities. Address network vulnerabilities with the appropriate security measures. Ensure that consideration is given to virtualization and cloud technology.

Due Week 8 and worth 120 points

This assignment consists of two (2) sections: an infrastructure document and a revised project plan. You must submit both sections as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment.

With the parameters set forth at the onset of the project, present the infrastructure and security policy that will support the expected development and growth of the organization. The network solution that is chosen should support the conceived information system and allow for scalability. The network infrastructure will support organizational operations; therefore, a pictorial view of workstations, servers, routers, bridges, gateways, and access points should be used. Since the company will be merging with a multinational company, virtualization and cloud technology should be taken into consideration. In addition, access paths for Internet access should be depicted. A narrative should be included to explain all the nodes of the network and the rationale for the design. Lastly, using the Confidentiality, Integrity and Availability (CIA) Triangle, define the organizational security policy.

Write a five to ten (5-10) page infrastructure document in which you:

1. Identify possible network infrastructure vulnerabilities. Address network vulnerabilities with the appropriate security measures. Ensure that consideration is given to virtualization and cloud technology.
2. Design a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Explain the rationale for the logical and physical topographical layout of the planned network. Note: The graphically depicted solution is not included in the required page length.
3. Illustrate the possible placement of servers, including access paths to the Internet and firewalls. Note: facility limitations, workstations, printers, routers, switches, bridges, and access points should be considered in the illustration.
4. Create and describe a comprehensive security policy for the company that will:

• Protect the company infrastructure and assets by applying the principals of CIA. Note: CIA is a widely used benchmark for evaluation of information systems security, focusing on the three (3) core goals of confidentiality, integrity, and availability of information.
• Address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
• Include charts or diagrams created in MS Visio or Dia as an appendix of the infrastructure document. All references to these diagrams must be included in the body of the infrastructure document.

Use Microsoft Project to:

1. Update the project plan (summary and detail) template, from Project Deliverable 4: Cloud Technology and Virtualization, with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks.

The specific course learning outcomes associated with this assignment are:

• Describe the methods and best practices in implementing process change in IT organizations.
• Describe the role and methods of technology-induced process improvement in organizations.
• Use technology and information resources to research issues in information systems.
• Write clearly and concisely about leadership issues and strategic insight of the Information systems domain using proper writing mechanics and technical style conventions.

Points: 120	Project Deliverable 5: Network Infrastructure and Security
Criteria	Unacceptable Below 70% F		Fair 70-79% C	Proficient 80-89% B	Exemplary 90-100% A
Section 1: Infrastructure Document
1a. Identify possible network infrastructure vulnerabilities. Address network vulnerabilities with the appropriate security measures. Ensure that consideration is given to virtualization and cloud technology. Weight: 20%	Did not submit or incompletely identified possible network infrastructure vulnerabilities. Did not submit or incompletely addressed network vulnerabilities with the appropriate security measures. Did not submit or incompletely ensured that consideration is given to virtualization and cloud technology.		Partially identified possible network infrastructure vulnerabilities. Partially addressed network vulnerabilities with the appropriate security measures. Partially ensured that consideration is given to virtualization and cloud technology.	Satisfactorily identified possible network infrastructure vulnerabilities. Satisfactorily addressed network vulnerabilities with the appropriate security measures. Satisfactorily ensured that consideration is given to virtualization and cloud technology.	Thoroughly identified possible network infrastructure vulnerabilities. Thoroughly addressed network vulnerabilities with the appropriate security measures. Thoroughly ensured that consideration is given to virtualization and cloud technology.
1b. Design a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Explain the rationale for the logical and physical topographical layout of the planned network. Weight: 20%	Did not submit or incompletely designed a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Did not submit or incompletely explained the rationale for the logical and physical topographical layout of the planned network.		Partially designed a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Partially explained the rationale for the logical and physical topographical layout of the planned network.	Satisfactorilydesigned a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Satisfactorily explained the rationale for the logical and physical topographical layout of the planned network.	Thoroughlydesigned a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Thoroughly explained the rationale for the logical and physical topographical layout of the planned network.
1c. Illustrate the possible placement of servers, including access paths to the Internet and firewalls. Weight: 15%	Did not submit or incompletely illustrated the possible placement of servers, including access paths to the Internet and firewalls.		Partially illustrated the possible placement of servers, including access paths to the Internet and firewalls.	Satisfactorilyillustrated the possible placement of servers, including access paths to the Internet and firewalls.	Thoroughlyillustrated the possible placement of servers, including access paths to the Internet and firewalls.
1di. Create and describe a comprehensive security policy for the company that will protect the company infrastructure and assets by applying the principals of CIA. Weight: 15%	Did not submit or incompletely created and described a comprehensive security policy for the company that will protect the company infrastructure and assets by applying the principals of CIA.		Partially created and described a comprehensive security policy for the company that will protect the company infrastructure and assets by applying the principals of CIA.	Satisfactorilycreated and described a comprehensive security policy for the company that will protect the company infrastructure and assets by applying the principals of CIA.	Thoroughly created and described a comprehensive security policy for the company that will protect the company infrastructure and assets by applying the principals of CIA.
1dii. Create and describe a comprehensive security policy for the company that will address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information. Weight: 15%	Did not submit or incompletely created and described a comprehensive security policy for the company that will address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.		Partially created and described a comprehensive security policy for the company that will address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.	Satisfactorilycreated and described a comprehensive security policy for the company that will address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.	Thoroughly created and described a comprehensive security policy for the company that will address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.
Section 2: Revised Project Plan
2. Update the project plan from Project Deliverable 4: Cloud Technology and Virtualization, with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks. Weight: 5%		Did not submit or incompletely updated the project plan from Project Deliverable 4: Cloud Technology and Virtualization,with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks.	Partially updated the project plan from Project Deliverable 4: Cloud Technology and Virtualization,with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks.	Satisfactorily updated the project plan from Project Deliverable 4: Cloud Technology and Virtualization, with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks.	Thoroughly updated the project plan from Project Deliverable 4: Cloud Technology and Virtualization, with three to five (3-5) new project tasks each consisting of five to ten (5-10) subtasks.
3. Clarity, writing mechanics, and formatting requirements Weight: 10%		More than 6 errors present	5-6 errors present	3-4 errors present	0-2 errors present