Business Continuity Planning Lab #6.
A risk assessment is a process to identify potential hazards and analyze what could happen if a hazard occurs. A business impact analysis (BIA) is the process for determining the potential impacts resulting from the interruption of time sensitive or critical business processes. A business continuity plan is a roadmap for continuing operations under adverse conditions such as a storm or a crime. A disaster recovery plan, is a plan for business continuity in the event of a disaster that destroys part or all of a business's resources, including IT equipment, data records and the physical space of an organization.
Security assessment: Severe Risk
Computer name: VLABS\WIN2K8A-DC
IP address: 10.10.10.3
Security report name: VLABS - WIN2K8A-DC (3-23-2014 2-04 AM)
Scan date: 3/23/2014 2:04 AM
Scanned with MBSA version: 2.2.2170.0
Catalog synchronization date: Security updates scan not performed
Operating System Scan Results Administrative Vulnerabilities Issue: Local Account Password Test Score: Check not performed Result: Password checks are not performed on a domain controller.
Issue: File System Score: Check passed Result: All hard drives (1) are using the NTFS file system. Detail: | Drive Letter | File System | | C: | NTFS |
Issue: Password Expiration Score: Check failed (non-critical) Result: Some user accounts (2 of 4) have non-expiring passwords. Detail: | User | | Guest | | sec |
Issue: Guest Account Score: Check passed Result: The Guest account is disabled on this computer.
Issue: Autologon Score: Check passed Result: Autologon is not configured on this computer.
Issue: Restrict Anonymous Score: Check passed Result: Computer is properly restricting anonymous access.
Issue: Administrators Score: Check failed (non-critical) Result: More than 2 Administrators were found on this computer. Detail: | User | | VLABS\Administrator | | VLABS\Enterprise Admins | | VLABS\sec |
Issue: Windows Firewall Score: Best practice Result: Windows Firewall is disabled and has exceptions configured. Detail: | Connection Name | Firewall | Exceptions | | All Connections | Off | Services | | student | Off* | Services* | | utility | Off* | Services* |
Issue: Automatic Updates Score: Check failed (critical) Result: The Automatic Updates feature has not been configured on this computer. Please upgrade to the latest Service Pack to obtain the latest version of this feature and then use the Control Panel to configure Automatic Updates.
Issue: Incomplete Updates Score: Best practice Result: No incomplete software update installations were found.
Additional System Information Issue: Windows Version Score: Best practice Result: Computer is running Microsoft Windows 7.
Issue: Auditing Score: Best practice Result: Neither Logon Success nor Logon Failure auditing