Risk in class sheet

User Domain

phishing attack, lack of security awareness, security awareness training, password reset and phishing incident response

workstation

malware infection, outdated antivirus software, regular patching and antivirus updates

LAN

unauthorized access, weak internal network segmentation, VLANs access control lists, network log analysis and isolation of compromised nodes

LAN to WAN

external intrusion, unsecured firewall configuration, proper firewall rules, IDS/IPS, apply updated firewall policies, blokc malicious IPs

WAN

data interception, unencrypted communication, VPN encryption, rekey VPSN and rotate credentials

System/Application

SQL injection, poor input validation, secure coding practices, apply patches, and monitor logs for anomalies 

remotes access 

credential theft, weak passwords or no mfa, multi factor authentication, disable compromised account, force password reset.