Blog

Critical to information security in the modern day

Critical to information security in the modern day

Computer Network Security

When considering the most critical to information security in the modern day, one
of the most credible is one that has seen a recent increase in occurrence over the
past decade. Deliberate software attacks on company information systems have become
very common. This has caused a heightened awareness of corporate information
security as a result. It has helped to curb some of the impact but has failed to
prevent it. “In the last 10 years, I don’t think we’ve seen breaches that have
affected consumers at this scale,” said Ondrej Krehel, information security officer
for Scottsdale, Ariz.-based Identity Theft 911. “It’s been the worst year in a
decade.” (Liebowitz, 2011) Recently we have seen attacks on Sony, RSA, Lockheed
Martin, Epsilon, Fox Broadcasting, NASA, PBS, the European Space Agency, the
British and French Treasuries, the FBI and Citigroup. All of these took place
within the first six months on 2011 alone

Information and communication technology infrastructure

In this Group Project, assume that you and the members of your group are top managers of a big international company spread over several continents. You decide to rebuild/expand your company’s Information and Communication Technology infrastructure and information system.

Characterise your company and specify the type of your proposed change. It can be, for example:

Redistribution of data, i.e. migration from the centralised data storage into the company’s local branches (or opposite)
Entering the Web market and redesigning your traditional brick-and-mortar structure
Changing communication channels with your suppliers and dealers into paperless forms
Exploiting knowledge of your employees using knowledge management tools and approaches
Introducing the concepts of learning organisation into your functions
Choose any of above or specify your own re-engineering process of a similar scope to those listed here. The description does not need to be complex, but it should state its three to four main steps that will affect various departments of your company. Also, specify the affected departments and the consequences of the changes on them.

To successfully accomplish the task, you will have to select and purchase new hardware and software and re-train your employees. There is a danger of resistance against the project as it represents change of a large magnitude and addresses many people. To prevent similar problems, your top managers want to motivate your staff.

During the first week, agree upon your proposed change. Consider yourselves being members of a board representing as many countries (or continents) as the number of members of your group. Specify how you imagine the change will affect each region.

During the second week, concentrate on your presentation of the change in a positive way. You plan to invite people to participate, not to intimidate or to repel them. Communicate your project in a positive way.

In Chapter 9, various theories and methods of employee motivation are described. Select one or several of them and prepare a Motivation Plan to be submitted to your board of governors. The plan should include the reasons for your approach, the way it should be implemented, the financial considerations and how its success (or failure) could be evaluated. Should it be implemented immediately, or do you favour a limited-scope study (a pilot project or splitting into stages)?

Describe also how to motivate your employees to accept the change and positively contribute to it and show its advantages and disadvantages. Characterise differences between the regions when appropriate.

In the end of the second week of your project (Week 4 of the module), you will submit one document for your entire group. Your document should have 1,500-2,000 words (not including the list of works cited), but it is the quality of the answer that matters, not the number of words. Cite and reference all sources use the Harvard Liverpool Referencing System.

Compare u.s. and e.u. policies

Compare U.S. and E.U. policies and underlying philosophies of privacy. Include references to monitoring and privacy in the workplace, surveillance, and disclosure/data privacy. In your estimation, could self-regulation be effective or does it need to be supplemented by laws and regulations? Is the European model worth emulating in the U.S.? What ambiguities exist?

Consequences of the security breach

Objective
Analyze the impact of security breaches

Instructions:
1. you need to select a particular security breach that happened in the recent past. You need to search the Internet to find a security breach that you can analyze. Once you select a particular security breach to work on, other students cannot select the same.
2. Analyze the selected security breach. Here are some key questions you need to think about and address in your assignment.
a. What caused the breach? Could it have been avoided?
b. What are the consequences of the security breach? That is, how did it affect the various stakeholders?
i. Stakeholders include shareholders, customers, suppliers, employees, etc.
ii. Retrieve the stock price of the company for a month before and a month (or less if it a recent breach that happened within the last month) after. Plot this data in an appropriate chart. What is this chart suggesting?
c. In your opinion, how did the organization respond to this breach?
i. What did the organization do and should have done (but did not do) after the breach?

General Instructions
? [Provide your analysis in a Word document along with the chart that you created
Length: between 350 and 450 words
?Cite all your sources. Provide full citations (you can use any citation format).

What factors might an organization consider

 

What factors might an organization consider

Computer Network Security
What factors might an organization consider when choosing to implement an AD-
integrated DNS zone versus a traditional zone? Describe a scenario in which it
would be preferable not to integrate a DNS zone into AD. Since the DNS zones can be
hosted on specific AD domain controllers, what factor(s) might go into deciding
which DCs will host DNS?

Describe worst practices that avoided when selecting an epp

Describe worst practices that avoided when selecting an epp

Computer Network Security
Cybersecurity Processes and Technologies DISCUSSION TOPIC: EPP Presentation

You have been invited to participate in a “lightening round” of short presentations
at an internal meeting of CISO staff members. For this activity you must prepare a
3 to 5 paragraph briefing statement which answers the following questions. Use
information from the weekly readings and your Case Study #1 research and product
review.

1. What is the most important business reason that you could give for purchasing an
Endpoint Protection Platform? (Consider data protection, system protection, etc.)

2. Name and briefly describe three “best practices” that should be used when
acquiring (purchasing) an EPP.

3. Name and briefly describe three “worst practices” that should be avoided when
selecting an EPP.

Why you periodically change the key used to encrypt messages Computer Network Security

Why you periodically change the key used to encrypt messages
Computer Network Security
Discussion

1. Do you currently use, or have you used in the past, any computer security
measures? If so, what do you use? If not, what measures would you consider using?
What attacks are you trying to protect against? 250- 400 words

2. Why should you periodically change the key used to encrypt messages? What attack
is more likely to succeed if a key has been used frequently? How frequently should
the key be changed?

Propose plan that focuses on password policies-

Your electronics manufacturing company is working on a new product. The board of directors thinks that this product will revolutionize the travel industry and generate huge profits for the company. To protect this product during the research and development cycle, the company is planning to install a new network consisting of a dozen computers. Your company selected you to lead a team that will develop a subset of a security plan for the network.

In 1-2 pages, write a report on the following:

Propose a detailed plan that focuses on password policies and authentication methods to protect the project from becoming public during the research and development phase.

Include an estimated cost of your plan.

Develop plan for assessing it security for chosen company

 

Develop plan for assessing it security for chosen company

 

Computer Network Security
Term Paper: Planning an IT Infrastructure Audit for Compliance

Note: Chapter 5 of the required textbook may be helpful in the completion of the
assignment.

The audit planning process directly affects the quality of the outcome. A proper
plan ensures that resources are focused on the right areas and that potential
problems are identified early. A successful audit first outlines the objectives of
the audit, the procedures that will be followed, and the required resources.

Choose an organization you are familiar with and develop an eight to ten page IT
infrastructure audit for compliance in which you:

1. Define the following items for an organization you are familiar with:

a. Scope
b. Goals and objectives
c. Frequency of the audit
d. Duration of the audit

2. Identify the critical requirements of the audit for your chosen
organization and explain why you consider them to be critical requirements.

3. Choose privacy laws that apply to the organization, and suggest who is
responsible for privacy within the organization.

4. Develop a plan for assessing IT security for your chosen organization by
conducting the following:

a. Risk management
b. Threat analysis
c. Vulnerability analysis
d. Risk assessment analysis

5. Explain how to obtain information, documentation, and resources for the
audit.

6. Analyze how each of the seven domains aligns within your chosen
organization.

7. Align the appropriate goals and objectives from the audit plan to each
domain and provide a rationale for your alignment.

8. Develop a plan that:

a. Examines the existence of relevant and appropriate security policies and
procedures.
b. Verifies the existence of controls supporting the policies.
c. Verifies the effective implementation and ongoing monitoring of the
controls.

9. Identify the critical security control points that must be verified
throughout the IT infrastructure, and develop a plan that includes adequate
controls to meet high-level defined control objectives within this organization.

10. Use at least three quality resources in this assignment. Note: Wikipedia
and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-
inch margins on all sides; citations and references must follow APA or school-
specific format. Check with your professor for any additional instructions.

• Include a cover page containing the title of the assignment, the student’s
name, the professor’s name, the course title, and the date. The cover page and the
reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

• Describe the parameters required to conduct and report on IT infrastructure
audit for organizational compliance.
• Describe the components and basic requirements for creating an audit plan
to support business and system considerations
• Develop IT compliance audit plans
• Use technology and information resources to research issues in security
strategy and policy formation.
• Write clearly and concisely about topics related to information technology
audit and control using proper writing mechanics and technical style conventions.

 

Describe ways hacker can gain access to employee information

Part 1 – Q1. Security Threats to Employee Information” Please respond to the following:

Cyber security threats have been on the rise over the last few decades. With more advanced technology, hackers have found ways to break through security defenses and haul away employee information. The headlines are filled with news on security breaches on very well-known organizations. First, watch the video “Massive cyber attack strikes Anthem” (1 min 43 s), located at http://www.reuters.com/video/2015/02/05/massive-cyberattack-strikes-anthem?videoId=363104985&mod=related&channelName=cybersecurity, and then please respond to the following question:

Describe two (2) ways a hacker can gain access to employee information. Recommend the steps an organization could take to address these security breaches after the fact. Then, outline a plan for preventing these breaches from occurring, and specify the legal requirements you would structure around information security in an HRIS.

Part 2 – Respond to the information.

Two ways that hacker can steal the employee’s confidential information from an HRIS system is a phishing scam and buffer overflow. A phishing scam is when the hacker sent out a fake email that looks authentic to all users of the HRIS system asking them to verify their information by clicking on a special link. Then the hackers use the information to promote their illegal activities. The best way to fight this type of hacking is to provide training and education to the users to what to look for to ensure that they are on the real site; and to educate them to never give their personal information without asking HR first.

Buffer Overflow is a software bug that cause the written data code to buffer which make it to overrun it designated boundary. This overrunning allows the hacker to be able to overwrite the coding and to extract information for the protected data. The best way to eliminate this problem is to hire an unified threat management team that will monitor the system, identify the breach and stop it before any confidential information is breach.

An organization has legal responsibility to ensure that their employees’ personal information is safe from unauthorized individual therefore, they need to establish an unified threat management team to handle security.