Week Three

Second task, should be finished end of December.

25th November - 31st December 2011 

Finding 23 PETRONAS list of critical application name.

The task:

Continuously, as part of security work communication between staff in different department is necessary. Every people in each department support each other and connected to everyone as they are working in the same company. This is to get every project running smoothly and followed the time span or schedule. Therefore, a list of critical application name where can be find from certain people at certain department need good communication skills, indirectly testing our confident level and knowledge. When dealing with people a strong reason must be provided to get the accurate answer as well as requested by the supervisor. Critical application server is any server that has a high risk of being corrupted if any disruption happened. Usually, the high risk server monitoring big issued like finance and etc. The SAP has all critical application as it played the important rules in the building. Thus to understand details about critical application, an active directory should be first be in your head – knowledge. As noticed for, active directory is a database that keeps track of all the user accounts and passwords in your organization. It allows you to store your user accounts and passwords in one protected location, improving your organization's security. Active Directory is subdivided into one or more domains. A domain is a security boundary. Each domain is hosted by a server computer called a domain controller (DC). A domain controller manages all of the user accounts and passwords for a domain. Domains and the Domain Name System (DNS) Domains are named using the Domain Name System (DNS). If your company is called ACME Corporation your DNS name would be (for example) acme.com. This is the top-level domain name for your company. The security domain in Active Directory maps directly to the DNS domain name. For larger organizations you can subdivide Active Directory into child domains (based on geography for example). If ACME Corporation has three divisions named West, Central, and East, the sub-domains can have the DNS names west.acme.com, central.acme.com, and east.acme.com. Each domain requires a server computer. In the above scenario you would need at least four servers to host Active Directory as follows: acme.com west.acme.com central.acme.com east.acme.com

Week two

Task on 2nd until 21st Nov 2011,

Level 16, Network lab

Staff table

From 0800 until 1700

Everyday

Today I should meet my supervisor and report myself to him. However it quite funny because my supervisor should be relax and act calmly because he was so experienced in work and meeting people. However it differs, because he looks quite shock and little chaos. So, I made myself look very confident and he shown me my room. For a while, I've being place in the network room since a new staff will report on 15 Nov 2011. However in between this time I kept moving from one place to another because on the due date he entered he did not registered. Thus, I can say in this first month I became a nomadic people.

First task should be finished end of November.

Eight full ring file (with the largest size) add with the attachment to my e-mail it became nine ring file.

The task was:

Understanding the concept of system security or security process controlled by iP Security Office (iPSO). Which means iPSO is responsible to ensure all the company under PETRONAS to follow the baseline suggested. For example a form known as Exception Form is given / provided to any company that facing a problem mostly on security side or requesting for any project like configuration a routers and etc. However a justification will be suggested by the requested company itself and the form will be rechecked by the HOD before the form is accepted or rejected. Accepted and rejected of Exception Form is due to the time requested between six month until one year and other reason. Besides, a scanning process had been done. Which to ensure the entire networking port close and open by the right person at the right time. This is to guarantee the systems controlled or run in this building are perfectly secure. If we found any open port, an alert message or directly called the person to quickly close or aware with the open port. An open port, freely without monitoring will commit danger to the company as it can allowed outsider or hackers to easily break any data system in the building.  Therefore it is important to ensure, monitored and scanned the network port frequently. Otherwise, a scanning to find devices around the given IP address was conducted to ensure and alert with “project, devices and networking port - actively running around us”. In other words, always updated with the latest project and what is going on in every second.