During the Determination of Scope and Objectives we discovered Datacore was compromised by an external hacker in October of 2001. As a result of this attack their business web page was defaced and they noticed some of their source code was altered or missing. Following the initial compromise, several denial of service attacks were launched against Datacore which would make their local area network virtually unusable. This breach of security caused major delays in deadlines and ultimately a major loss of business integrity to their clients. By the end of the client contract renewal in January 2002, the finance department discovered there was a 40% loss of their contracts, and by April 2002 they were at a 60% loss of revenue. By June of 2002, Datacore discovered their source code was no longer unique and many of their competitors were now writing identical code. Fearing another breach in network security, the company contacted "Kevin, Aaron, Rick, and Scott- (K.A.R.S.), a network solutions company to assess their current network environment and develop a solution to increase productivity and security.
After reviewing the current state of Datacore, we realized there are two major problems that need to be resolved, therefore we launched the Investigation and Feasibility phase. The most pressing issue is to implement and enforce a security and computer use policy. These policies will outline who is in charge of server maintenance, what should be done to maintain machines on the network, and how those machines should be used. This will require the cooperation of the IS Managers, Systems Administrators, and the legal department. The IS managers and the System Administrators should work together to draft these policies and determine what new resources may be needed to enforce them, such as a network security department. The legal department should be used to evaluate the finalized policies to ensure there are not any legal issues, such as privacy infringement.
