Wgu D485 Dgn2 Task 1: Cloud Security
b b b b b b
Implementation Plan Latest Update With
b b b b b
Complete Solution
b b
This document contains:
b b
WGU D485 b
WGU D485 DGN2 TASK 1
b b b b
Cloud Security Implementation Plan
b b b
Latest Update with complete solution
b b b b
, WGU D485 DGN2 TASK 1: Cloud Security by by by by by by
Implementation Plan Latest Update With
by by by by by
by Complete Solution by
DGN2 TASK 1: Cloud Security Implementation Plan College of Information
b b b b b b b b b
b Technology, Western Governors University b b b
Cloud Security implementation Plan b b b
A. Executive Summary b
With their rapid growth, and mounting cybersecurity concerns, SWBTL LLC has begun a
b b b b b b b b b b b b
b migration to the Microsoft Azure cloud environment. The consultant who was heading up the
b b b b b b b b b b b b b
b migration has unexpectedly left the project to work for another company, and in doing so has left
b b b b b b b b b b b b b b b b
b the Microsoft Azure environment in need of serious repair. After viewing the company overview
b b b b b b b b b b b b b
b and business requirements, I have identified several areas in which the business requirements are
b b b b b b b b b b b b b
b not in sync with the current security infrastructure.
b b b b b b b
1. Role Based Access Control (RBAC): SWBTL LLC’s business requirements document
b b b b b b b b b
b mentions that each department should have its own resource group, and these resource
b b b b b b b b b b b b
b groups should apply the principal of least privilege. That is where role- based access
b b b b b b b b b b b b b
b controls come in. The current cloud environment does not utilize role- based access
b b b b b b b b b b b b
b controls, so it is difficult to apply the principal of least privilege within the
b b b b b b b b b b b b b
b environment. This causes serious security concerns. b b b b b
, 2. Compliance: Due to the frequent payment card transactions that the company processes
b b b b b b b b b b b
b daily, and the contracts that they have with the United States Government, SWBTL
b b b b b b b b b b b b
b LLC must remain in compliance with multiple regulations. The Payment Card Industry
b b b b b b b b b b b
b Data Security Standard DSS, or PCI DSS, and the Federal Information Security
b b b b b b b b b b b
Modernization Act, better known as FISMA. The current Cloud environment does not
b b b b b b b b b b b b
b appear to be in compliance with these regulations.
b b b b b b b
3. Azure Key Vaults and Encryption: The business requirements document states that
b b b b b b b b b b
b the cloud should incorporate data at rest and data in transit encryption. This not only
b b b b b b b b b b b b b b
helps keep the data secure, but it helps keep SWBTL LLC compliant with the
b b b b b b b b b b b b b
b relevant standards and regulations. Currently, the Company’s Cloud infrastructure
b b b b b b b b
b does not appear to be taking advantage of the Azure Key Vaults tool.
b b b b b b b b b b b b
4. Vulnerability Scans: The scope of vulnerability scans and vulnerability management
b b b b b b b b b
b in general should be better defined in the Microsoft Azure environment.
b b b b b b b b b b
5. Backups: The business requirements document has specific requirements regarding
b b b b b b b b
b backup frequency, location, times and for how long the backups should be kept.
b b b b b b b b b b b b
b There are no configurations present in the current environment that support these
b b b b b b b b b b b
b requirements.
SWBTL LLC’s Azure environment in its current form is seriously lacking the necessary
b b b b b b b b b b b b
b configurations and policies to not only be compliant with regulations, but also to keep data
b b b b b b b b b b b b b b
b secure. There are several critical actions that need to be taken in order to strengthen the
b b b b b b b b b b b b b b b
b company’s cloud environment and bring it up to industry security standards.
b b b b b b b b b b
, B. Proposed Course Of Action b b b
Service Model – b b
SWBTL LLC should take immediate action to bring its Microsoft Azure environment into line with
b b b b b b b b b b b b b b
b the business overview and requirements document. The service model should have the capability
b b b b b b b b b b b b
b to be incompliance with all applicable regulations and standards set out in the
b b b b b b b b b b b b
document. I am recommending that SWBTL LLC transitions into the Azure Government
b b b b b b b b b b b
b Infrastructure as a Service (IaaS) model. This model would fulfil compliance requirements and
b b b b b b b b b b b b
b SWBTL LLC should qualify as a government contractor.
b b b b b b b
Applicable Regulatory Directives - b b b
Payment Card Industry Data Security Standard (PCI DSS): The Payment Card Industry Data
b b b b b b b b b b b b
b Security Standard (PCI DSS) is a set of requirements intended to ensure that all companies that
b b b b b b b b b b b b b b b
b process, store, or transmit credit card information maintain a secure environment (de Groot,
b b b b b b b b b b b b
b 2024). Because SWBTL LLC processes a large amount of payment card transactions daily, it is
b b b b b b b b b b b b b b
b imperative that they adhere to the standards set out in PCI DSS. These standards include 12 points
b b b b b b b b b b b b b b b b
b that involve a variety of protections including requirements on: firewalls, passwords, encryption,
b b b b b b b b b b b
b antivirus protection, physical access and vulnerability scanning.
b b b b b b
Federal Information Security Modernization Act (FISMA): Because SWBTL LLC maintains a
b b b b b b b b b b
b number of contracts with the United States government, the company overview and business
b b b b b b b b b b b b
b requirements document states that SWBTL LLC must maintain compliance with the Federal
b b b b b b b b b b b
b Information Security Modernization Act, which essentially outlines how to secure federal data.
b b b b b b b b b b b
b FISMA has requirements regarding monitoring, conducting risk assessments, security controls,
b b b b b b b b b
b maintain a security plan, data categorization and maintaining an IT inventory (Solarwinds,
b b b b b b b b b b b
b 2023). Again, a transition to Azure Government Infrastructure as a service (IaaS) should be a
b b b b b b b b b b b b b b
b perfect fit given the business requirements.
b b b b b
b b b b b b
Implementation Plan Latest Update With
b b b b b
Complete Solution
b b
This document contains:
b b
WGU D485 b
WGU D485 DGN2 TASK 1
b b b b
Cloud Security Implementation Plan
b b b
Latest Update with complete solution
b b b b
, WGU D485 DGN2 TASK 1: Cloud Security by by by by by by
Implementation Plan Latest Update With
by by by by by
by Complete Solution by
DGN2 TASK 1: Cloud Security Implementation Plan College of Information
b b b b b b b b b
b Technology, Western Governors University b b b
Cloud Security implementation Plan b b b
A. Executive Summary b
With their rapid growth, and mounting cybersecurity concerns, SWBTL LLC has begun a
b b b b b b b b b b b b
b migration to the Microsoft Azure cloud environment. The consultant who was heading up the
b b b b b b b b b b b b b
b migration has unexpectedly left the project to work for another company, and in doing so has left
b b b b b b b b b b b b b b b b
b the Microsoft Azure environment in need of serious repair. After viewing the company overview
b b b b b b b b b b b b b
b and business requirements, I have identified several areas in which the business requirements are
b b b b b b b b b b b b b
b not in sync with the current security infrastructure.
b b b b b b b
1. Role Based Access Control (RBAC): SWBTL LLC’s business requirements document
b b b b b b b b b
b mentions that each department should have its own resource group, and these resource
b b b b b b b b b b b b
b groups should apply the principal of least privilege. That is where role- based access
b b b b b b b b b b b b b
b controls come in. The current cloud environment does not utilize role- based access
b b b b b b b b b b b b
b controls, so it is difficult to apply the principal of least privilege within the
b b b b b b b b b b b b b
b environment. This causes serious security concerns. b b b b b
, 2. Compliance: Due to the frequent payment card transactions that the company processes
b b b b b b b b b b b
b daily, and the contracts that they have with the United States Government, SWBTL
b b b b b b b b b b b b
b LLC must remain in compliance with multiple regulations. The Payment Card Industry
b b b b b b b b b b b
b Data Security Standard DSS, or PCI DSS, and the Federal Information Security
b b b b b b b b b b b
Modernization Act, better known as FISMA. The current Cloud environment does not
b b b b b b b b b b b b
b appear to be in compliance with these regulations.
b b b b b b b
3. Azure Key Vaults and Encryption: The business requirements document states that
b b b b b b b b b b
b the cloud should incorporate data at rest and data in transit encryption. This not only
b b b b b b b b b b b b b b
helps keep the data secure, but it helps keep SWBTL LLC compliant with the
b b b b b b b b b b b b b
b relevant standards and regulations. Currently, the Company’s Cloud infrastructure
b b b b b b b b
b does not appear to be taking advantage of the Azure Key Vaults tool.
b b b b b b b b b b b b
4. Vulnerability Scans: The scope of vulnerability scans and vulnerability management
b b b b b b b b b
b in general should be better defined in the Microsoft Azure environment.
b b b b b b b b b b
5. Backups: The business requirements document has specific requirements regarding
b b b b b b b b
b backup frequency, location, times and for how long the backups should be kept.
b b b b b b b b b b b b
b There are no configurations present in the current environment that support these
b b b b b b b b b b b
b requirements.
SWBTL LLC’s Azure environment in its current form is seriously lacking the necessary
b b b b b b b b b b b b
b configurations and policies to not only be compliant with regulations, but also to keep data
b b b b b b b b b b b b b b
b secure. There are several critical actions that need to be taken in order to strengthen the
b b b b b b b b b b b b b b b
b company’s cloud environment and bring it up to industry security standards.
b b b b b b b b b b
, B. Proposed Course Of Action b b b
Service Model – b b
SWBTL LLC should take immediate action to bring its Microsoft Azure environment into line with
b b b b b b b b b b b b b b
b the business overview and requirements document. The service model should have the capability
b b b b b b b b b b b b
b to be incompliance with all applicable regulations and standards set out in the
b b b b b b b b b b b b
document. I am recommending that SWBTL LLC transitions into the Azure Government
b b b b b b b b b b b
b Infrastructure as a Service (IaaS) model. This model would fulfil compliance requirements and
b b b b b b b b b b b b
b SWBTL LLC should qualify as a government contractor.
b b b b b b b
Applicable Regulatory Directives - b b b
Payment Card Industry Data Security Standard (PCI DSS): The Payment Card Industry Data
b b b b b b b b b b b b
b Security Standard (PCI DSS) is a set of requirements intended to ensure that all companies that
b b b b b b b b b b b b b b b
b process, store, or transmit credit card information maintain a secure environment (de Groot,
b b b b b b b b b b b b
b 2024). Because SWBTL LLC processes a large amount of payment card transactions daily, it is
b b b b b b b b b b b b b b
b imperative that they adhere to the standards set out in PCI DSS. These standards include 12 points
b b b b b b b b b b b b b b b b
b that involve a variety of protections including requirements on: firewalls, passwords, encryption,
b b b b b b b b b b b
b antivirus protection, physical access and vulnerability scanning.
b b b b b b
Federal Information Security Modernization Act (FISMA): Because SWBTL LLC maintains a
b b b b b b b b b b
b number of contracts with the United States government, the company overview and business
b b b b b b b b b b b b
b requirements document states that SWBTL LLC must maintain compliance with the Federal
b b b b b b b b b b b
b Information Security Modernization Act, which essentially outlines how to secure federal data.
b b b b b b b b b b b
b FISMA has requirements regarding monitoring, conducting risk assessments, security controls,
b b b b b b b b b
b maintain a security plan, data categorization and maintaining an IT inventory (Solarwinds,
b b b b b b b b b b b
b 2023). Again, a transition to Azure Government Infrastructure as a service (IaaS) should be a
b b b b b b b b b b b b b b
b perfect fit given the business requirements.
b b b b b
