I am part of an in-house development team that provides the software that is used in our company's factories across the world for production as well as for order management, and which also enables the sites to share data with each other across our WAN.
I have been recently tasked with the following objective to be completed within 4 months:
Produce a report giving a risk analysis of the security weaknesses in our software suite and infrastructure, with current and proposed mitigations.
This will be the first time that this kind of analysis is performed on our system and, not having any significant security experience, I am not sure where to begin.
So, my question is: how should I best approach an analysis of the risks and vulnerabilities of an enterprise software system and the infrastructure that surrounds it?
Or, to put it another way, how should I break down the task of analysing the security of our system and our infrastructure?
Please note that there is a separate team at another site that is responsible for general network security.
Are there any recommended resources (websites, books, etc) to which I should refer?