Week seven and Eight

Seven task,

24 January 2012 

Procedure/Policies and Assessment of Security

This is my last task, where the new procedure is needed as the new management has been introduce. This task need ask to find what is the Symantec System Manager, SSM. This is the new software introduce to the iPerintis to verified the baseline digitally compared to user need to checked one by one based on the list given. After the SSM finished vierified the network it will give complete result include the graph, chart, report and details of each ip, servers and etc. 

To complete this task, lots of research to be done and a long discussion between me and my clicks. However not only SSM, but there were more assessment, policies and procedure need to be done before I finished my intern. Such as wireless, security product and etc.

Finally, the procedure need to be submitted to my supervisor.

Eight task,

26 January 2012 

Interview and Asset check

As a student for internship, I have been offered to attend the interview as a staff in iPerintis, however the offer is not came from my department,iPSO but OISS. Which is pi-orly Network department and the jobs is much more heavy. The interviewer was one of the important person for iPerintis and his office located at level 8 Tower 1, KLCC.

Thus, after my graduation day they asked me to send my latest resume to be work at iPerintis. 

Next, all my stuff like note book and access card need to be return back to the company and all my works were saved and recorded at the special desktop as "Legacy Atiqah".

THE END.

Week Five an Six

Fifth task,

14 January 2012 

Slide Presentation 

As a big company and act as a support team for PETRONAS where located at KLCC Tower, early every month for each department in iPerintis at Menara Perak,KL need to send a representative to introduce their department to the new staff during the presentation day. Therefore, to complete my college requirement for intern, my supervisor asked me to do few slide for this presentation and for his meeting at the Tower or any other place.

The slide must be a corporate slide and details. This is to maintain the good name of the company and as a representative for PETRONAS. Indirectly I have learn how "big guys" in big company was very strict in any jobs given by their boss. Example of the slide including "The Mobile Security" and the scanning result for the ip addresses requested. 

Six task,

19 January 2012 

Scanning IP Addresses and critical servers

As the new year come, our HOD ask us to scan all the critical servers, ip and network to get the latest updated about the attack probability by hackers or any disasters could happen. Only the audit team are allowed do this jobs, because they need to scan at the special lab and the scanning process only can be done   

after office hour. Which is from 7:00 pm until 10:00pm.

Even more, the staff need to stay back at the office and did an overtime. Again it test how you can adept with the situation and how strong you can handle the jobs.

However, no worries, because the entertainment room which include the x-box, home theater, mini gym, karaoke set, pool table, dart, and some indoor game like cards, sahiba and etc. is located at my  15th floor. So, after office hour and during lunch break they can release their stress by enjoying themselves in the entertainment room. Hence while waiting the product to be completely scanned, they can have short break at the room.

Week Four

Third task,

1st January 2012 (two weeks)

Verify AD Baseline

Again as being mention earlier, where communication skills were very important. During this time I have been asked to meet people in a different department to ensure all the server setting follow the baseline and procedure given. As the Audit and Compliance team member, I learn how to do auditing process. Therefore, when I met this people they have to show me details about the server setting and I need to take the screenshot as a prove, so in future there is nothing to worried about. 

Based on the list given, AD Baseline it were more than 100 server to be verified. However, during my time I focused on the critical server and servers that are completely setup. For information, I cant simply verified the server, but I need to sit and discuss with those people. Some servers are located at Myanmar and other countries. Others maybe located at the offshore, therefore to get access to the server we must have a strong network connection and the admin password. This is because we are verifying the network as remotely at the other place. 

Hence, if any problem occur like we cant access the network or the setting were not the same, me and the responsible person need to access the servers from the Tower and they have to reset the servers exactly like what the audit team has request. To be at the Tower is not easy as the security control were totally tight. I need a staff to accompanied me, walk through the scanning machine (body scanning), change the access card given when you reach any floor in the building and leave your ic number and signature there. In addition as the problem occur, the task was late from its due date. 

Fourth task,

10 January 2012 

Verify AD Baseline and Meeting

The verifying and data entry is a continuous task. While I make my words done, there were some meeting need to be attend and write the minute meeting for my manager and supervisor guidance and even more the new year start and the new management has been introduce by the iP Security Office Head of Department, Mr.Ganesh. Therefore in directly they keep my day busy. 

The meeting is discussing about how they can manage the critical servers, ways they are approaching the servers, how to avoid mistakes from the outsider auditor while they checking the servers setting and procedure and etc. 

All these task can give you a big pressure as the audit team itself and to ensure the servers is well manage. Experiencing the moment made you very excited and enjoy your work. That is what i feel because for me it were so exciting and challenging moment. Where at the peak time, it prove how you can manage your life time, if you are married it prove how strong you are to face the challenging and I? So excited doing my work.

Week Three

Second task, should be finished end of December.

25th November - 31st December 2011 

Finding 23 PETRONAS list of critical application name.

The task:

Continuously, as part of security work communication between staff in different department is necessary. Every people in each department support each other and connected to everyone as they are working in the same company. This is to get every project running smoothly and followed the time span or schedule. Therefore, a list of critical application name where can be find from certain people at certain department need good communication skills, indirectly testing our confident level and knowledge. When dealing with people a strong reason must be provided to get the accurate answer as well as requested by the supervisor. Critical application server is any server that has a high risk of being corrupted if any disruption happened. Usually, the high risk server monitoring big issued like finance and etc. The SAP has all critical application as it played the important rules in the building. Thus to understand details about critical application, an active directory should be first be in your head – knowledge. As noticed for, active directory is a database that keeps track of all the user accounts and passwords in your organization. It allows you to store your user accounts and passwords in one protected location, improving your organization's security. Active Directory is subdivided into one or more domains. A domain is a security boundary. Each domain is hosted by a server computer called a domain controller (DC). A domain controller manages all of the user accounts and passwords for a domain. Domains and the Domain Name System (DNS) Domains are named using the Domain Name System (DNS). If your company is called ACME Corporation your DNS name would be (for example) acme.com. This is the top-level domain name for your company. The security domain in Active Directory maps directly to the DNS domain name. For larger organizations you can subdivide Active Directory into child domains (based on geography for example). If ACME Corporation has three divisions named West, Central, and East, the sub-domains can have the DNS names west.acme.com, central.acme.com, and east.acme.com. Each domain requires a server computer. In the above scenario you would need at least four servers to host Active Directory as follows: acme.com west.acme.com central.acme.com east.acme.com

Week two

Task on 2nd until 21st Nov 2011,

Level 16, Network lab

Staff table

From 0800 until 1700

Everyday

Today I should meet my supervisor and report myself to him. However it quite funny because my supervisor should be relax and act calmly because he was so experienced in work and meeting people. However it differs, because he looks quite shock and little chaos. So, I made myself look very confident and he shown me my room. For a while, I've being place in the network room since a new staff will report on 15 Nov 2011. However in between this time I kept moving from one place to another because on the due date he entered he did not registered. Thus, I can say in this first month I became a nomadic people.

First task should be finished end of November.

Eight full ring file (with the largest size) add with the attachment to my e-mail it became nine ring file.

The task was:

Understanding the concept of system security or security process controlled by iP Security Office (iPSO). Which means iPSO is responsible to ensure all the company under PETRONAS to follow the baseline suggested. For example a form known as Exception Form is given / provided to any company that facing a problem mostly on security side or requesting for any project like configuration a routers and etc. However a justification will be suggested by the requested company itself and the form will be rechecked by the HOD before the form is accepted or rejected. Accepted and rejected of Exception Form is due to the time requested between six month until one year and other reason. Besides, a scanning process had been done. Which to ensure the entire networking port close and open by the right person at the right time. This is to guarantee the systems controlled or run in this building are perfectly secure. If we found any open port, an alert message or directly called the person to quickly close or aware with the open port. An open port, freely without monitoring will commit danger to the company as it can allowed outsider or hackers to easily break any data system in the building.  Therefore it is important to ensure, monitored and scanned the network port frequently. Otherwise, a scanning to find devices around the given IP address was conducted to ensure and alert with “project, devices and networking port - actively running around us”. In other words, always updated with the latest project and what is going on in every second.

Industrial Training Information

First day of working:

Briefings on 1st Nov 2011, Tuesday.

Level 17, meeting room 1

From 0800 until 1830

As every human in this world, first day of working, first day of school, first day in new family and many more regarding to the first day may be the most unforgotten moments and perhaps the most scary part in their life. First day can be assumed as the most important and big day for every single life in this world. However, back to my first day at iPerintis, Menara Perak it was totally differ from what I've said earlier. This is because, for the first time I entered the building everything looks so familiar to me. Started with the guards, front desk, elevators until to the meeting room. It just, like I was there before. Frankly said I felt nothing, not scared and not excited. Some kind of weird right? Then from the start, (although I knew I shouldn’t say this, but I just wanted to share my feeling) first presentation until the last one were Malays and they can speak very well with not even a word came up from their mouth was Malay words?!. Such a standing clap Malaysian. Now who said Malay can't sit or stand in the same level with different races? Next, the whole day made everyone tired and sleepy, due to the short break and long lectures from them. But, the best part was, we were served with breakfast, lunch and two time tea break. The briefing focus on what is iPerintis? The function of iPerintis, who is iPerintis work for? What is inside the iPerintis? Department of the iPerintis, the target, vision and mission of the iPerintis? and finally how the staff work together in iPerintis; with maintaining the relationship of each people and department. What I can say, from the view of this building and its environment, they are much closed even they never met each other and when they have a discussion everyone gave their effort and full commitment. None of them simply escape or give thousands of reason to the party members. Next, actually after the long briefing I can straight went home but however, a girl from Human Resource (HR) Department asked me to filled up some forms which need to be concerned to the iPerintis building and my Head Of Department (HOD), Mr.Ganesh. What a wasted time, I need to stay another an hour because of her attitude (delayed the time). Inside my heart i felt like screaming and yelled at her face because it’s started to rain outside and I’m riding a bike man.! To be professional i just followed her flow so i can finish it early. Now, the rain became heavy and the day turns dark. Started my bike and straight go home. On my way back, I nearly collided with several cars. Thank to Allah I’m here and safe.

To be continued...