Can’t manage and secure part of the network, because of existing outdated switches and Infrastructure. In addition to Weak Network Segmentation.
Risk Description
Outdated switches and infrastructure limit the ability to manage and secure parts of the network, increasing security and performance risks.
Existing Controls
Basic Control
Risk Mitigation Policy
- Regularly update firmware and apply patches provided by vendors.
- Make sure all of the switches are managed and support security protocols.
- Apply Vlan, Intervlan routing and Access Control Lists
- Deploy Intrusion Detection and Prevention Systems
- Enable Network Access Control (NAC) services
- Make sure the network administrator can monitor all of the network traffic and activities.
- Collect Infrastructure logs in the SIEM system to analyze and detect any suspect activities.
Location/Contact Person details
The chairman of risk management sub-committee in UTAS-SUR
Dr.Sami Al-Batashi, Phone: +968 9293 9604
Email: sami.albattashi@utas.edu.om
Risk Management Authority
Risk Management Committee in UTAS-SUR
Risk Likelihood
High
Risk Impact
High
Risk Level
High
Risk Incident Response Procedures
- Monitoring and detecting issues related to outdated network infrastructure.
- Isolating affected network segments to contain the risk.
- Identifying the root cause, such as legacy switches or unsupported configurations.
- Applying temporary fixes and enhanced security measures to minimize impact.
- Documenting the incident, actions taken, and communicating with all members and parties.
- Planning and initiating infrastructure upgrades to prevent future occurrences.
Risk Termination
By sending the final report explaining the problem causes and how we can mitigate next time.