Details on the system architecture of NightCorp is located here.

Homework - Threat Assessment Matrix and Recommendations

Objective:

Students will be assigned a homework assignment that is a direct extension of this challenge. The student will need to continue on from their work in this challenge and perform the following tasks:

Create a Threat Assessment Matrix:

Develop a simple risk matrix that maps the likelihood of each identified threat occurring against the potential impact to NightCorp. Use the following categories:

Likelihood: Unlikely, Possible, Likely, Very Likely
Impact: Low, Moderate, High, Critical

For each critical asset identified, include a specific threat, the likelihood of that threat occurring, and the potential impact it would have on NightCorp’s operations.

Provide Recommendations

Based on your analysis, provide recommendations for mitigating the most significant threats. identified in your matrix. These may include, but are not limited to:

Enhancing access controls (e.g., implementing multi-factor authentication, strong password policies)
Encryption of sensitive data (both at rest and in transit)
Adding network segmentation for critical systems or creating isolated environments
Regular patching and security audits
Employee training on cybersecurity best practices (e.g., phishing prevention, secure device usage)

Deliverables

Threat Assessment Matrix Document:

Submit a document containing your threat assessment matrix. The matrix should include:

A table or diagram mapping identified threats to their likelihood and impact.
Clear explanations of why each threat has the likelihood and impact rating it has been assigned.

Recommendations Report:

Submit a report detailing your mitigation recommendations for the most critical threats. The report should cover:

Specific recommendations for each identified threat.
Justifications for why these recommendations would be effective in mitigating the risks.
Potential benefits and drawbacks of each recommendation.

Formatting Requirements:

The report and matrix should be clearly organized, with sections for each task.
Include any relevant diagrams, tables, or charts to aid in presenting your analysis.
The final submission should be in either a Google Doc (or similar, e.g. Word Doc) or PDF format.

Assessment Criteria:

Accuracy The threats and their corresponding likelihood and impact are correctly assessed.
Clarity: Recommendations are clearly explained and directly address the identified threats.
Comprehensiveness: All critical assets and significant threats are addressed, with thorough reasoning behind each recommendation.
Presentation: The matrix and report are well-organized, easy to read, and free from grammatical errors.