Chapter 29 — Applied project | Technologist Information security

Lesson map

Lesson 29 published. Map, example, EX085.

flowchart TD
  N0["Learning outcomes"]
  N1["29.1 Defining the project"]
  N2["29.2 Finding every path"]
  N3["29.3 Delivering"]
  N4["29.4 Measuring"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX085"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["29.1 Defining the project"]
  N2["29.2 Finding every path"]
  N3["29.3 Delivering"]
  N4["29.4 Measuring"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX085"]

[Learning outcomes]
    |
    v
[29.1 Defining the project]
    |
    v
[29.2 Finding every path]
    |
    v
[29.3 Delivering]
    |
    v
[29.4 Measuring]
    |
    v
[Worked example] --> [Exercise EX085]

Learning outcomes

You will (1) define a practical security project with a client; (2) deliver it with evidence; (3) measure the result.

29.1 Defining the project

For his applied project, Jamal chooses remote access to Riverbend systems. The firewall review and log analysis showed services exposed to the internet more than necessary. The project goal is that every remote access path is known, restricted to the people and suppliers who need it and protected by multi-factor authentication. The IT manager agrees and sets a deadline of eight weeks. Ms. Grant approves the plan and success criteria. He writes the goal, criteria and deadline on a one-page plan signed by the IT manager.

29.2 Finding every path

Jamal lists remote access paths: the staff remote desktop gateway, the file transfer server, the camera company's remote account, the pool controller supplier's connection and the email service. He uses the firewall rules, the supplier list and an authorised external scan of Riverbend's internet addresses. The scan finds one more path: an old web management page for a router, reachable from the internet. He records each path in a table with its purpose, the people or suppliers who use it, how it is protected and the evidence he used to find it. The table becomes the project's main working document.

29.3 Delivering

Jamal works through each path. The gateway already uses multi-factor authentication. The file transfer server was restricted earlier. The camera account is disabled between visits. The pool controller connection moves behind the gateway. The router management page is closed to the internet. He records each change, the date and the evidence: configuration screenshots and a repeat external scan. He tests each change from outside Riverbend's network using an authorised laptop and confirms that the closed paths are no longer reachable. For the pool controller, he confirms with the supplier that their engineers can still connect through the gateway.

29.4 Measuring

Jamal measures the result: five known paths and one newly found, all six now restricted or closed, and all remaining paths protected by multi-factor authentication. The repeat scan shows no unexpected services. Weekly failed login analysis shows no external guessing. He notes the limits: the scan sees only what is reachable at the time, so it must be repeated regularly. He presents the measures in a short table with the evidence linked, and the IT manager schedules a repeat external scan every quarter. Jamal estimated six weeks for the project and finished in seven, which he records against his feedback goal.

Worked example

Jamal defines a remote access project, finds six paths including an exposed router page, restricts or closes all of them with evidence and measures the result with a repeat scan.

Synthetic case. The project is synthetic.

Errors and limits

A single external scan shows only what was reachable at that moment.

Exercises

EX085 — Project goal. What is the project goal?
Show marking criteria
Rubric: 3 = every remote path known, restricted and MFA-protected;; 2 = partly correct;; 1 = vague;; 0 = none.
EX086 — Extra path. What extra path did the scan find?
Show marking criteria
Rubric: 3 = an old router management page;; 2 = partly correct;; 1 = vague;; 0 = none.
EX087 — Path total. How many paths were restricted or closed?
Show marking criteria
Rubric: 3 = six;; 2 = partly correct;; 1 = wrong;; 0 = none.