Running Head: C796 CAPSTONE LATEST UPDATES MAY2023

Running Head: C796 CAPSTONE LATEST UPDATES MAY2023. Running Head: C796 CAPSTONE Table of Contents Security Problem Under Investigation 2 Justification of Security Problem 3 Background Information 3 Documentation 3 Root Causes 3-4 Project Stakeholders 4 Functional and Detailed Requirements 5 Industry-Standard Methodology 5-6 Rollout, Launch and Implementation Strategy 6-8 Implementation Risks 8-10 Training Approach 11 Required Resources 11-12 Final Project Deliverables 12 Project Timeline 12-13 Projects Outcomes and Evaluation Framework 13 Test Plan 13 Acceptance Criteria and Key Performance Indicators 13 2 Test Cases and Scenarios 13-14 Analysis of Results 14 Sources 15 Proposal Overview Security Problem Under Investigation Warrenton Oil Company is a medium-sized company that provides multiple services to the consumer. Fuel Transportation is their primary means of revenue, in which they have over 100 vehicles and drivers to deliver fuel products to a multitude of vendors across central and east central Missouri, with a few stops into western Illinois. The currently own 55 convenience stores, with plans to acquire 10 more through the buyout of an existing chain. And lastly, they own 3 different hotels in the area. In total, they have over 1,000 employees across each functional area of their business model. Warrenton Oil Company, at its corporate office, currently utilizes a Windows Server Domain to incorporate all network security policies. The servers that are currently in place as the Primary Domain Controller (PDC) and Backup Domain Controller (BDC) are housed in outdated server hardware, and are running out of compliance Operating Systems (OS) of Small Business Server 2003 and Windows Server 2012. While Windows Server 2012 has support until October 10, 2023 ( 2003 reached End-of-Life (EOL) was reached on July 11th, 2017, meaning it needs to be immediately upgraded to be in compliance with current cyber security policies and procedures. In addition to the Server OS being EOL, the server hardware is also outdated, and needs to be updated to ensure that when new Server OS is installed, the hardware has the processing and memory capacity to facilitate the network traffic that will be present. Additionally, the hardware needs to have redundancy built in (power supplies, processors, etc.), as well as the network having redundancy built in. 3 These are necessary to ensure that each branch of the business model has access to the data they need, when they need it, and in a manner that is conducive to their business interests. The primary concern with the current environment is the vulnerabilities inherent with Small Business Server 2003, those which cannot be remediated. One such vulnerability is CVE- which is an Exec Code vulnerability present in an untrusted search path in the Data Access Objects () library, which allows for “the execution of arbitrary code and gives access to the DLL’s. This allows for DLL high jacking via a Trojan horse ” ( mitigate this vulnerability and is one of the primary needs for a Domain Controller Transition. Root Causes