Executive Summary This is a risk assessment report for Global Finance Inc. (a fictional institution) The company has serious security issues, which affect its assets and have severe consequences on its reputation, finance, and operations. The report shows risks associated with GFI assets and possible mitigating approaches. The report identifies and describes GFI authentication technology and network security challenges. It also shows both internal and remote access points of the company’s network. The report also has a design of secure authentication technology and network security for GFI. Moreover, it provides assumptions for any unknown facts identified in the process. The report identifies all known vulnerabilities in the GFI system and then proposes a new design. The use of combined technologies is important in this case for enhancing authentication and network security measures. In addition, the report also addresses the CEO’s concerns about the mobility security and design for secure mobile computing for portable devices with regard to authentication technologies and protection of data. The report also contains areas of wireless vulnerabilities and provides recommendations for protecting the network against security breaches. Finally, it shows a cloud computing system for GFI, which has secure ways of data protection under different situations. The report also shows security risks and identifies them with severity as critical, high, medium, or low with associated impacts to GFI. The report highlights information security challenges at GFI. It is important for the CEO, COO and other senior executives to take part in formulation of security policy to protect GFI from both internal and external threats. The security policy must account for prevention, detection, and response. Risk Assessment Risks assessment is critical for GFI. The process identifies threats and vulnerabilities that GFI has suffered from its vulnerable information technology (IT) environment. Risk assessment shall allow the company to detect, avoid, and minimize threats and fix all discrepancies in its policies and procedures in an effective way. The aim of the risk assessment at the company is to avoid possible monetary losses and damages to its reputation. Threats have caused damages to GFI in the past. In addition, attackers have exploited its system vulnerabilities to gain access to confidential information of clients. The scope of Risk Assessment at GFI The risk assessment scope for security and GFI system vulnerabilities covered the following areas:   * Networked servers, such as Web, e-mail, application   * Desktop and mobile devices used by staff members   * Network devices, such as firewalls, switches, routers The scanning tools have the ability to detect any known security breaches or bugs in the IT infrastructures. The tools can also determine if the GFI systems are prone to known attacks and exploitation by hackers. In addition, they can show vulnerabilities with software and hardware in terms of setting and determining flaws in security policies (US Department of Commerce, 2011). Scanning of GFI systems focused on critical areas like servers and the networked equipment. Some key departments and administrative areas were also potential areas for scanning. The approach was suitable for understand