228 Managing Network Vulnerability Assessment
CLIENT security architecture does not provide, by design, any means of limiting
these individual’s or group’s network infrastructure access. CLIENT tends to accept
the risks associated with having a completely open internal architecture in order
to accommodate the fluid and changing nature of the environment. However, a
documented rationale should accompany any risks that are accepted.
CLIENT has several knowledgeable and skilled individuals in the Informa-
tion Technology department. These individuals are aware of security-related
issues and understand that their internal systems are completely open and
accessible. They differ in their opinions as to the severity of this situation.
The situation entrusts ...