Blog

Describe at least three possible risk management efforts

Describe at least three possible risk management efforts

Computer Network Security
Term Paper: The Rookie Chief Information Security Officer

This assignment consists of five parts:

Part 1: Organization Chart
Part 2: Request for Proposal (RFP) Plan
Part 3: Physical Security Plan
Part 4: Enterprise Information Security Compliance Program
Part 5: Risk Management Plan

Imagine that you have been recently promoted to serve as Chief Information Security
Officer (CISO) for a Fortune 500 organization. This organization has known brand
products across the world and expects top-secret methods for safeguarding
proprietary information on its recipes and product lines. The Board of Directors
request that their information security strategy be upgraded to allow greater
opportunities of secure cloud collaboration between suppliers and resellers of
their products. Another concern they have is the recent number of hacktivist
attacks that have caused the network to fail across the enterprise. Their concern
extends to making sure that they have controlled methods for accessing secured
physical areas within their various regional facilities.

For your new position, you will be responsible for developing standards, methods,
roles, and recommendations that will set the new IT security path for the
organization. The existing organization has limited experience in supporting an
enhanced level of IT security; therefore, you may need to outsource certain
security services.

Additionally, you may create and / or assume all necessary assumptions needed for
the completion of this assignment.

Write an eight to twelve page paper in which you provide the following
deliverables:

Part 1: Organization Chart

1. Use Visio or an Open Source alternative, such as Dia, to:

a. Create an organization chart in which you:

i. Illustrate the roles that will be required to ensure design, evaluation,
implementation, and management of security programs for the organization.

ii. Within your organizational chart, clearly identify the reporting structure for
roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT
Security Engineer, Privacy Security Professional, and IT Procurement Specialist.

iii. List the types of resources required to fulfill the each forensic duty of the
organization below each of the roles you identified.

iv. Align your organization chart to reflect the Department of Homeland Security
(DHS) Essential Body of Knowledge’s three areas of information security: physical
security professional, privacy professional, and procurement professional. Provide
comments and comparisons on how your organizational chart fosters these three
values.

Part 2: Request for Proposal (RFP) Plan

2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that
could partner with your internal team to deliver optimum IT service delivery. The
RFP Plan should contain qualifying criteria of potential vendors and the
responsibilities of the vendor once the contract is awarded. As part of the plan,
you must:

a. Describe at least two perspectives that need to be closely monitored within the
contract.

b. Give your perspective on at least two methods that could be used to evaluate and
develop a qualified trusted supplier list.

Part 3: Physical Security Plan

3. Recommend a physical security plan that could be used to protect sensitive areas
such as telecom rooms, employee only areas, and manufacturing facilities in which
you:

a. Include at least three specific methods.

Part 4: Enterprise Information Security Compliance Program

4. Establish an enterprise information security compliance program that addresses
the concerns of the board of directors of the organization in which you:

a. Describe specific plans and control objectives that could be adopted to address
the known issues.

b. Suggest at least three information security policies that could be developed and
practiced within the organization for data security assurance.

c. Outline the steps you would take to define the security needs of the
organization in terms of duties, staffing, training, and processes.

Part 5: Risk Management Plan

5. Develop a risk management plan in which you:

a. Describe at least three possible risk management efforts that could be used to
assess threats and unknown issues.

b. Determine why defining priorities is an important part of the process when
enumerating and having efficient risk control measures.

c. Suggest specific technical and management controls that could be enacted in
order to monitor risks accurately.

6. Use at least three quality resources in this assignment. Note: Wikipedia and
similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-
inch margins on all sides; citations and references must follow APA or school-
specific format. Check with your professor for any additional instructions.

• Include a cover page containing the title of the assignment, the student’s
name, the professor’s name, the course title, and the date. The cover page and the
reference page are not included in the required assignment page length.

• Include charts or diagrams created in Visio or one of its equivalents such
as Dia. The completed diagrams / charts must be imported into the Word document
before the paper is submitted.

The specific course learning outcomes associated with this assignment are:

• Describe and apply the 14 areas of common practice in the Department of
Homeland Security (DHS) Essential Body of Knowledge.
• Describe best practices in cybersecurity.
• Describe physical security plans and processes.
• Evaluate the ethical concerns inherent in cybersecurity and how these
concerns affect organizational policies.
• Explain legal and regulatory compliance practices.
• Explain risk management plans and policies.
• Describe physical security plans and processes.
• Develop a cybersecurity plan that incorporates the Department of Homeland
Security (DHS) Essential Body of Knowledge.
• Identify the strategic management issues in cybersecurity planning and
response.
• Explain data security competencies to include turning policy into practice.
• Compare and contrast the functional roles of an organization in the context
of cybersecurity.
• Identify and analyze the role of the Chief Information Officer, Information
Security Officer, and IT Security Compliance Officer in the context of
cybersecurity.
• Use technology and information resources to research issues in
cybersecurity.
• Write clearly and concisely about topics associated with cybersecurity
using proper writing mechanics and technical style conventions.

 

Advantages of layer 3 multi-layer switch traditional router

Consider this assignment and post your opinion on the following question.

1. In your opinion, what are the advantages of a layer 3 multi-layer switch over a traditional router?

2. Complete the main portion of this assignment as outlined below. When applicable, adhere to APA formatting and reference guidelines.

Using the Internet, find and download two different packet tracer softwares.

Write a brief review for both.

Review both, and decide which you would use if you needed to use one as part of your job. Explain.

When reviewing others’ posts, look at the criteria they used to review their choices, and give them feedback.

Describe the concept and function of electronic money

Anonymous E-money Attachment Collapse.

The concept of electronic money (e-money) is simple: a user can transfer payment from his or her own bank account to the merchant’s account without using an intermediary, such as a credit card. E-money can be of two types: identified e-money and anonymous money (also called digital cash or e-cash).

As a new model of exchange, e-money has its own security and privacy issues. Protection for both payers and receivers needs to be considered and in place. In this Discussion you will explore the security issues surrounding e-money.

To complete this Discussion: Post: Describe the concept and function of electronic money (e-money).

Explain the security and privacy issues relating to this new model of exchange.

Identify potential solutions for these issues and evaluate their ability to protect both payers and receivers.

Analyze how coppa and cipa are similar and different

Computer Ethics Paper

Assignment: COPA and CIPA

The Children’s Online Privacy Protection Act (COPPA) and the Children’s Internet Protection Act (CIPA) are both intended to provide protections for children accessing the Internet. However, they both have had some opposition.

Write a three to five page paper in which you:

1. Describe the main compliancy requirements and the protected information for both COPPA and CIPA.
2. Analyze how COPPA and CIPA are similar and how they are different, and explain why there is a need for two different acts.
3. Describe what you believe are the most challenging elements of both COPPA and CIPA to implement in order to be compliant.
4. Speculate on why COPPA and CIPA define protection for different ages; COPPA defines a child as being under the age of 13 and CIPA defines a minor as being under the age of 17.
5. Identify the main opposition to COPPA and CIPA based on research and speculate on whether they will be changed in the future based on the opposition.
6. Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

o Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.

o Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

The specific course learning outcomes associated with this assignment are:

o Explain the concept of privacy and its legal protections.
o Describe legal compliance laws addressing public and private institutions.
o Use technology and information resources to research legal issues in information security.
o Write clearly and concisely about information security legal issues and topics using proper writing mechanics and technical style conventions.

Describe the purpose of a ddos attack

Describe the purpose of a DDoS attack. How is a DDoS attack configured? How can DDoS attacks be detected and prevented? Research the internet for a DDoS attack. Describe the events. Your reply should be at least 125 words.

Will be submitted through safeassign.

Describe each of the six stages of the employee life cycle

IT Security and Policies Assignment

Question One – There are two approaches to information security policies: the parallel approach and the integrated approach.

a) Explain each of them.

b) Which one is more efficient? Explain your response.

Question Two – Describe each of the six stages of the employee life cycle using your own words.

Question Three – Define and provide examples for the following using your own words:

a) Information assets

b) Information system

Question Four – a) Based on what the Federal Information Processing Standard 199 (FIPS-199) requires information owners to classify information and information systems? Provide a detailed answer.

b) Are there any differences between classifying governmental information and commercial information? And are there any common levels of classification have been used to classify governmental information and commercial information? Explain your answers and supported them with examples (NOT from the book or slides).

c) Can a company make a change on classified information? Assuming now a company feels that such information need higher protection or the company decide to make some information that was classified as secret to be accessed by public. Here, is there any mechanism or process that allows a change in classified information. Explain your answers and supported them with examples (NOT from the book or slides).

Write paper about information security and cyber security

Write paper about the following topics- information security, cyber security, and risk management with relation to cloud computing including things like risk management.

Difficulties in prosecutions of computer-related crimes

Part 1: Q1: choose best one, Please provide reason of your choice in a few sentences, in your own wordsand/or reasons not choosing the other choices. A mere mention of the textbook or reproduction of the textbook statements would not serves as the reason. Restating the problem in your own words also does not constitute as the reason. Sometimes defining the terms may give you a clue to the reason.

1. What piece of legislation allows computer records documenting criminal activity to be used in court?
a. Federal Rules of Evidence 803(6)
b. Federal Computer Documents Rule 703(a)
c. Digital Signature Bill
d. National Infrastructure Protection Act
___
Reason:
2. How should you NOT report computer crime?
a. e-mail
b. telephone
c. tell management in person
d. tell the IT department in person
___
Reason:
3. What is most often overlooked when planning for information security?
a. firewalls
b. education
c. virus scans
d. electronic surveillance
___
Reason:
4. Which of the following is NOT a reason for the difficulties in prosecutions of computer–relatedcrimes?
a. The area of litigation is extremely technical and difficult to understand.
b. The laws themselves are relatively new and untested.
c. Most of the crimes do not fall under any of the current laws
d. The technology is very dynamic and the tactics of the perpetrators are constantly changing.
___
Reason:
5. What is authentication?
a. the act of binding an entity to a representation of identity
b. the act of ensuring that information is being sent securely
c. the act of ensuring that the receiver of information actually received it
d. the act of binding a computer system to a network
___
Reason
6. What is not considered the misuse of information?
a. the deletion of information from a system
b. the untimely release of secret information
c. the illegal sale of information to rival companies
d. the misrepresentation of information
___
Reason:

7. How does a client machine find the web address associated with a particular URL?
e. It uses translation software in the interpreter.
a. It sends a message to the nearest domain name server.
b. It uses hashing to translate the address.
c. It sends a message to the URL server.
___
Reason:

8. What does the first field of a cookie contain?
a. chocolate chips
b. encryption algorithm
c. public key for the site
d. name of the issuing site
___
Reason:

9. Which security solution is best for protecting the information system connected to the Internet?
a. virus scanning software
b. encryption
c. biometric authentication
d. firewalls
___
Reason:

10. A(n) ___________ accomplishes many of the same goals as a firewall, but is more limited in scope.
a. proxy server
b. screening router
c. IDS
d. ICQ
___
Reason:
Q2

QII.1 For a public-key encryption system, list reasons,
1) in favor of
2) and against
for using the same key pair for the encryption and the digital signature

QII.2 Describe “inference controls”
Give reasons why theyare needed.
And give specific examples(at least 3), and
Describe how the inference controlsare implemented; how they serve the purpose(effective) in a database.

QII.3 Describe the “crypto dilemma.”
Suggest 3 waysto address the “crypto dilemma.”
State the pros and cons of each way.

Part 3:

An enterprising group of entrepreneurs is starting a new data storage and retrieval business, SecureStore, Inc. For a fee, the new company will accept digitalized data (text and images, multimedia), and store it on hard drives until needed by the customer. Customer data will be transmitted to and from SecureStore over the Internet. SecureStore guarantees that the confidentiality and integrity of the datawill be maintained.

SecureStore also envisions certain information assurance requirements for their internal operations. Company employees will need to exchange confidential email, and will need a mechanism for verifying the integrity and originator of some email messages. Also, SecureStore intends a daily backup of all customer data to a remote facility via a leased line. They wish to do so as economically as possible, while ensuring the data’s confidentiality and integrity.

SecureStore is interviewing candidates for the position of Chief Information Officer (CIO). They are asking candidates to describe briefly how they would satisfy SecureStore’s requirements as stated above. How would a successful candidate respond?

First, distill the requirements from the above statement

Describe the main elements of data breach notification laws

Discussions

Info Systems

Discussion 1

“The New Beginning and Prototyping” Please respond to the following:

• Evaluate prototyping as a technique for gathering quality business requirements. Determine the approach to prototyping that would be better suited for emerging technology projects.Determine if a combination of prototyping approaches would be more efficient. Explain your answer.

Discussion 2

“Risk Management” Please respond to the following:

• Explain why project risk management is a key component to bringing a project to a successful conclusion and describe the relationship between project risk management and cost estimation.

Computer Ethics

eActivity

• Organizations need to be aware of, and comply with, the Payment Card Industry – Data Security Standards (PCI-DSS) to ensure the safeguarding of cardholder information. Review the PCI-Data Security Standard, located at https://www.pcisecuritystandards.org/security_standards/, and be prepared to discuss.

“Data Breach Notification” Please respond to the following:

• Due in large part to breach notification laws, we have heard about many more data breaches in the past few years.

o From the e-Activity, describe the main elements of data breach notification laws. Discuss the importance of breach notification for credit card information, as it relates to PCI-DSS.

o Describe the concept of a safe harbor and how that impacts an organization when developing its security methods. Determine if breach notification laws should define a minimum level of encryption to qualify for safe harbor and describe why or why not.

Research the elements of a multilayered security plan

You are a network security specialist at Richman Investments, a mid-level financial investment and consulting firm. The Richman corporate headquarters is located in Phoenix, Arizona. Currently, there are eight branch offices in: Atlanta, Georgia Chicago, Illinois Cincinnati, Ohio Denver, Colorado Los Angeles, California Montreal, Canada New York City, New York Washington, D.C. You received an e-mail from your supervisor stating that you need to create an outline of the general security solutions planned for the safety of data and information that belongs to the organization. You are told that every month, the networking division needs to submit a report to the senior management about the security plan for the month, and your outline will become a part of that report.

You need to research the elements of a multilayered security plan and to create a detailed outline. Your outline should indicate one or more general security solutions for each of the seven domains of a typical IT infrastructure.