A scheme regarding the analysis of security risks for enterprise computer and network systems: A case study

A security analysis was conducted to examine the computer system security of a small to midsize college. This case study is a report of the processes involved in that analysis. A summary of the nature of a security analysis, and the knowledge and skills required of the analyst to perform such a task is given. The study reports how information derived from interviews with college directors and system personnel was used to construct a logical organization of the college network from a security perspective. Each of the networked computer systems is examined in detail with respect to its users and use to identify security related strengths and weaknesses.;Findings regarding these systems are used to develop an algorithm which provides an objective rating of risk for each system. Finally a summary of findings is given, and the whole process examined retrospectively.