Alternative Approach to

Address Security Concerns

One alternative option proposed was to disconnect all production computers from the
Internet and rebuild the software systems on all of them from development files. The
second alternative was to make use of an alternative site which would go from cold
to hot.

Group 5 - Section H
Potential Advantages
Enhanced Security

By rebuilding systems from development files, any existing compromises could be eradicated,
strengthening the overall security posture.

Reduced Risk

Disconnecting from the Internet eliminates the possibility of further attacks during the rebuild
process.

Increased Confidence

A comprehensive rebuild provides assurance that all systems are clean and reliable.
Potential Disadvantages
1 Downtime

Operations staff estimated that the company would need to completely shut down its business for
24 to 36 hours to complete the rebuild, resulting in a significant loss of productivity and revenue.

2 Unforeseen Complications

While the rebuild processes were well-documented, there were concerns about potential hiccups
that could arise during the process, leading to delays in getting everything back online.

3 Customer Dissatisfaction

The prolonged downtime and potential disruptions could significantly impact customer
satisfaction, potentially causing them to seek alternative providers.
Building a New Site in a New Facility
Another approach proposed was to build a completely new site in a new facility using the development files. This would
allow for a smooth transition without the need to shut down the company's operations.
Potential Advantages
1 Continuity of
Operations
By building a new site in a
separate facility, the
company can continue its
operations uninterrupted,
minimizing any potential
losses.
2 A Clean Start
The new site would be free
from any potential
vulnerabilities or
compromises that may exist
in the current system,
providing a fresh and secure
environment.
3 Minimal Impact
Not having to shut down the
business ensures that
customers will experience
minimal disruption in
service, enhancing their
satisfaction and loyalty.
Potential Disadvantages
Costs

Obtaining space in a hosting facility and acquiring new equipment for the new site can be a costly
endeavor, impacting the company's financial resources.

Prolonged Exposure

Keeping the old system live while building the new site could increase the risk of further
compromise if the production equipment and files have been compromised.

Potential Threats

The time taken to create the new site opens up the possibility of further malicious activities by
intruders, potentially exacerbating the situation.
Conclusion
Both the alternative approaches had their own advantages and disadvantages. The final decision would depend on a
thorough assessment of the risks, costs, and potential impact on operations and customer satisfaction. Ultimately, the
chosen approach should ensure a secure and resilient system while minimizing disruption to the business.