Question

IT Case

The SSO Server is a single purpose server solely designed for SSO and resides in the internal network. Using a batch process, the vendor provides quarterly updates which are downloaded directly to the server and automatically installed by the server’s single purpose operating system. Access to the SSO application is restricted to the security administration staff. The vendor maintains an active account on the server in the event maintenance is required. The vendor accesses the system periodically to review status and log activity to determine the server’s capacity and to proactively look for concerns prior to problems arising. A replication copy of the SSO Server exists as a backup and automatically assumes primary role if the main server stops functioning.

Question or what needs to be solved: What are the Controls and what are the GAPS of this IT Case

Answer 1

For this case, you need to figure out what is missing. There is a master server which replicates all of its files and configuration to a slave one so there is a load balancer somewhere in between these two servers and there is a sync service running to make it automatic in between these two. Now the question arises is what if one server fails. Will the other one will get started without any issue. For this case, we need to think whether it is a cluster based setup or not. It should be a fault tolerance cluster which can shift the load to the different node if one gets failed. This way we can take advantage of such case.

I hope my answer is helpful.