Table of Contents
Security Problem Under Investigation 2
Justification of Security Problem 3
Background Information 3
Documentation 3
Root Causes 3-4
Project Stakeholders 4
Functional and Detailed Requirements 5
Industry-Standard Methodology 5-6
Rollout, Launch and Implementation Strategy 6-8
Implementation Risks 8-10
Training Approach 11
Required Resources 11-12
Final Project Deliverables 12
Project Timeline 12-13
Projects Outcomes and Evaluation Framework 13
Test Plan 13
Acceptance Criteria and Key Performance Indicators 13
Test Cases and Scenarios 13-14
Analysis of Results 14
Sources 15
, 2
Proposal
Overview
Security Problem Under Investigation
Warrenton Oil Company is a medium-sized company that provides multiple services to the
consumer. Fuel Transportation is their primary means of revenue, in which they have over 100 vehicles
and drivers to deliver fuel products to a multitude of vendors across central and east central Missouri,
with a few stops into western Illinois. The currently own 55 convenience stores, with plans to acquire 10
more through the buyout of an existing chain. And lastly, they own 3 different hotels in the area. In total,
they have over 1,000 employees across each functional area of their business model.
Warrenton Oil Company, at its corporate office, currently utilizes a Windows Server Domain to
incorporate all network security policies. The servers that are currently in place as the Primary Domain
Controller (PDC) and Backup Domain Controller (BDC) are housed in outdated server hardware, and are
running out of compliance Operating Systems (OS) of Small Business Server 2003 and Windows Server
2012. While Windows Server 2012 has support until October 10, 2023 (https://docs.microsoft.com/en-
us/lifecycle/products/windows-server-2012-r2), Small Business Server 2003 reached End-of-Life (EOL)
was reached on July 11th, 2017, meaning it needs to be immediately upgraded to be in compliance with
current cyber security policies and procedures.
In addition to the Server OS being EOL, the server hardware is also outdated, and needs to be
updated to ensure that when new Server OS is installed, the hardware has the processing and memory
capacity to facilitate the network traffic that will be present. Additionally, the hardware needs to have
redundancy built in (power supplies, processors, etc.), as well as the network having redundancy built in.
These are necessary to ensure that each branch of the business model has access to the data they need,
when they need it, and in a manner that is conducive to their business interests.