Category: Uncategorized

Explain the most common forms of digital crime.

Write a three to four (3-4) page paper in which you:

Explain the four (4) major categories of computer crimes, and provide at least one (1) example for each.

Explain the most common forms of digital crime.

Determine the category of computer crimes or cyber terrorism that presents the greatest overall threat at the present time. Provide a rationale to support your response.

Summarize the roles and responses that the U.S. government, court systems, and law enforcement agencies in combatting computer crime.

Next, suggest one (1) additional way-i.e., one not discussed in the textbook-that the law enforcement agencies can better counteract computer crime.

Use at least three (3) quality references for this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Describe the concept and function of electronic money

Anonymous E-money Attachment Collapse.

The concept of electronic money (e-money) is simple: a user can transfer payment from his or her own bank account to the merchant’s account without using an intermediary, such as a credit card. E-money can be of two types: identified e-money and anonymous money (also called digital cash or e-cash).

As a new model of exchange, e-money has its own security and privacy issues. Protection for both payers and receivers needs to be considered and in place. In this Discussion you will explore the security issues surrounding e-money.

To complete this Discussion: Post: Describe the concept and function of electronic money (e-money).

Explain the security and privacy issues relating to this new model of exchange.

Identify potential solutions for these issues and evaluate their ability to protect both payers and receivers.

Advantages of layer 3 multi-layer switch traditional router

Consider this assignment and post your opinion on the following question.

1. In your opinion, what are the advantages of a layer 3 multi-layer switch over a traditional router?

2. Complete the main portion of this assignment as outlined below. When applicable, adhere to APA formatting and reference guidelines.

Using the Internet, find and download two different packet tracer softwares.

Write a brief review for both.

Review both, and decide which you would use if you needed to use one as part of your job. Explain.

When reviewing others’ posts, look at the criteria they used to review their choices, and give them feedback.

Describe at least three possible risk management efforts

Describe at least three possible risk management efforts

Computer Network Security
Term Paper: The Rookie Chief Information Security Officer

This assignment consists of five parts:

Part 1: Organization Chart
Part 2: Request for Proposal (RFP) Plan
Part 3: Physical Security Plan
Part 4: Enterprise Information Security Compliance Program
Part 5: Risk Management Plan

Imagine that you have been recently promoted to serve as Chief Information Security
Officer (CISO) for a Fortune 500 organization. This organization has known brand
products across the world and expects top-secret methods for safeguarding
proprietary information on its recipes and product lines. The Board of Directors
request that their information security strategy be upgraded to allow greater
opportunities of secure cloud collaboration between suppliers and resellers of
their products. Another concern they have is the recent number of hacktivist
attacks that have caused the network to fail across the enterprise. Their concern
extends to making sure that they have controlled methods for accessing secured
physical areas within their various regional facilities.

For your new position, you will be responsible for developing standards, methods,
roles, and recommendations that will set the new IT security path for the
organization. The existing organization has limited experience in supporting an
enhanced level of IT security; therefore, you may need to outsource certain
security services.

Additionally, you may create and / or assume all necessary assumptions needed for
the completion of this assignment.

Write an eight to twelve page paper in which you provide the following
deliverables:

Part 1: Organization Chart

1. Use Visio or an Open Source alternative, such as Dia, to:

a. Create an organization chart in which you:

i. Illustrate the roles that will be required to ensure design, evaluation,
implementation, and management of security programs for the organization.

ii. Within your organizational chart, clearly identify the reporting structure for
roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT
Security Engineer, Privacy Security Professional, and IT Procurement Specialist.

iii. List the types of resources required to fulfill the each forensic duty of the
organization below each of the roles you identified.

iv. Align your organization chart to reflect the Department of Homeland Security
(DHS) Essential Body of Knowledge’s three areas of information security: physical
security professional, privacy professional, and procurement professional. Provide
comments and comparisons on how your organizational chart fosters these three
values.

Part 2: Request for Proposal (RFP) Plan

2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that
could partner with your internal team to deliver optimum IT service delivery. The
RFP Plan should contain qualifying criteria of potential vendors and the
responsibilities of the vendor once the contract is awarded. As part of the plan,
you must:

a. Describe at least two perspectives that need to be closely monitored within the
contract.

b. Give your perspective on at least two methods that could be used to evaluate and
develop a qualified trusted supplier list.

Part 3: Physical Security Plan

3. Recommend a physical security plan that could be used to protect sensitive areas
such as telecom rooms, employee only areas, and manufacturing facilities in which
you:

a. Include at least three specific methods.

Part 4: Enterprise Information Security Compliance Program

4. Establish an enterprise information security compliance program that addresses
the concerns of the board of directors of the organization in which you:

a. Describe specific plans and control objectives that could be adopted to address
the known issues.

b. Suggest at least three information security policies that could be developed and
practiced within the organization for data security assurance.

c. Outline the steps you would take to define the security needs of the
organization in terms of duties, staffing, training, and processes.

Part 5: Risk Management Plan

5. Develop a risk management plan in which you:

a. Describe at least three possible risk management efforts that could be used to
assess threats and unknown issues.

b. Determine why defining priorities is an important part of the process when
enumerating and having efficient risk control measures.

c. Suggest specific technical and management controls that could be enacted in
order to monitor risks accurately.

6. Use at least three quality resources in this assignment. Note: Wikipedia and
similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-
inch margins on all sides; citations and references must follow APA or school-
specific format. Check with your professor for any additional instructions.

• Include a cover page containing the title of the assignment, the student’s
name, the professor’s name, the course title, and the date. The cover page and the
reference page are not included in the required assignment page length.

• Include charts or diagrams created in Visio or one of its equivalents such
as Dia. The completed diagrams / charts must be imported into the Word document
before the paper is submitted.

The specific course learning outcomes associated with this assignment are:

• Describe and apply the 14 areas of common practice in the Department of
Homeland Security (DHS) Essential Body of Knowledge.
• Describe best practices in cybersecurity.
• Describe physical security plans and processes.
• Evaluate the ethical concerns inherent in cybersecurity and how these
concerns affect organizational policies.
• Explain legal and regulatory compliance practices.
• Explain risk management plans and policies.
• Describe physical security plans and processes.
• Develop a cybersecurity plan that incorporates the Department of Homeland
Security (DHS) Essential Body of Knowledge.
• Identify the strategic management issues in cybersecurity planning and
response.
• Explain data security competencies to include turning policy into practice.
• Compare and contrast the functional roles of an organization in the context
of cybersecurity.
• Identify and analyze the role of the Chief Information Officer, Information
Security Officer, and IT Security Compliance Officer in the context of
cybersecurity.
• Use technology and information resources to research issues in
cybersecurity.
• Write clearly and concisely about topics associated with cybersecurity
using proper writing mechanics and technical style conventions.

 

Describe ways hacker can gain access to employee information

Part 1 – Q1. Security Threats to Employee Information” Please respond to the following:

Cyber security threats have been on the rise over the last few decades. With more advanced technology, hackers have found ways to break through security defenses and haul away employee information. The headlines are filled with news on security breaches on very well-known organizations. First, watch the video “Massive cyber attack strikes Anthem” (1 min 43 s), located at http://www.reuters.com/video/2015/02/05/massive-cyberattack-strikes-anthem?videoId=363104985&mod=related&channelName=cybersecurity, and then please respond to the following question:

Describe two (2) ways a hacker can gain access to employee information. Recommend the steps an organization could take to address these security breaches after the fact. Then, outline a plan for preventing these breaches from occurring, and specify the legal requirements you would structure around information security in an HRIS.

Part 2 – Respond to the information.

Two ways that hacker can steal the employee’s confidential information from an HRIS system is a phishing scam and buffer overflow. A phishing scam is when the hacker sent out a fake email that looks authentic to all users of the HRIS system asking them to verify their information by clicking on a special link. Then the hackers use the information to promote their illegal activities. The best way to fight this type of hacking is to provide training and education to the users to what to look for to ensure that they are on the real site; and to educate them to never give their personal information without asking HR first.

Buffer Overflow is a software bug that cause the written data code to buffer which make it to overrun it designated boundary. This overrunning allows the hacker to be able to overwrite the coding and to extract information for the protected data. The best way to eliminate this problem is to hire an unified threat management team that will monitor the system, identify the breach and stop it before any confidential information is breach.

An organization has legal responsibility to ensure that their employees’ personal information is safe from unauthorized individual therefore, they need to establish an unified threat management team to handle security.

Develop plan for assessing it security for chosen company

 

Develop plan for assessing it security for chosen company

 

Computer Network Security
Term Paper: Planning an IT Infrastructure Audit for Compliance

Note: Chapter 5 of the required textbook may be helpful in the completion of the
assignment.

The audit planning process directly affects the quality of the outcome. A proper
plan ensures that resources are focused on the right areas and that potential
problems are identified early. A successful audit first outlines the objectives of
the audit, the procedures that will be followed, and the required resources.

Choose an organization you are familiar with and develop an eight to ten page IT
infrastructure audit for compliance in which you:

1. Define the following items for an organization you are familiar with:

a. Scope
b. Goals and objectives
c. Frequency of the audit
d. Duration of the audit

2. Identify the critical requirements of the audit for your chosen
organization and explain why you consider them to be critical requirements.

3. Choose privacy laws that apply to the organization, and suggest who is
responsible for privacy within the organization.

4. Develop a plan for assessing IT security for your chosen organization by
conducting the following:

a. Risk management
b. Threat analysis
c. Vulnerability analysis
d. Risk assessment analysis

5. Explain how to obtain information, documentation, and resources for the
audit.

6. Analyze how each of the seven domains aligns within your chosen
organization.

7. Align the appropriate goals and objectives from the audit plan to each
domain and provide a rationale for your alignment.

8. Develop a plan that:

a. Examines the existence of relevant and appropriate security policies and
procedures.
b. Verifies the existence of controls supporting the policies.
c. Verifies the effective implementation and ongoing monitoring of the
controls.

9. Identify the critical security control points that must be verified
throughout the IT infrastructure, and develop a plan that includes adequate
controls to meet high-level defined control objectives within this organization.

10. Use at least three quality resources in this assignment. Note: Wikipedia
and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-
inch margins on all sides; citations and references must follow APA or school-
specific format. Check with your professor for any additional instructions.

• Include a cover page containing the title of the assignment, the student’s
name, the professor’s name, the course title, and the date. The cover page and the
reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

• Describe the parameters required to conduct and report on IT infrastructure
audit for organizational compliance.
• Describe the components and basic requirements for creating an audit plan
to support business and system considerations
• Develop IT compliance audit plans
• Use technology and information resources to research issues in security
strategy and policy formation.
• Write clearly and concisely about topics related to information technology
audit and control using proper writing mechanics and technical style conventions.

 

Propose plan that focuses on password policies-

Your electronics manufacturing company is working on a new product. The board of directors thinks that this product will revolutionize the travel industry and generate huge profits for the company. To protect this product during the research and development cycle, the company is planning to install a new network consisting of a dozen computers. Your company selected you to lead a team that will develop a subset of a security plan for the network.

In 1-2 pages, write a report on the following:

Propose a detailed plan that focuses on password policies and authentication methods to protect the project from becoming public during the research and development phase.

Include an estimated cost of your plan.

Why you periodically change the key used to encrypt messages Computer Network Security

Why you periodically change the key used to encrypt messages
Computer Network Security
Discussion

1. Do you currently use, or have you used in the past, any computer security
measures? If so, what do you use? If not, what measures would you consider using?
What attacks are you trying to protect against? 250- 400 words

2. Why should you periodically change the key used to encrypt messages? What attack
is more likely to succeed if a key has been used frequently? How frequently should
the key be changed?

Describe worst practices that avoided when selecting an epp

Describe worst practices that avoided when selecting an epp

Computer Network Security
Cybersecurity Processes and Technologies DISCUSSION TOPIC: EPP Presentation

You have been invited to participate in a “lightening round” of short presentations
at an internal meeting of CISO staff members. For this activity you must prepare a
3 to 5 paragraph briefing statement which answers the following questions. Use
information from the weekly readings and your Case Study #1 research and product
review.

1. What is the most important business reason that you could give for purchasing an
Endpoint Protection Platform? (Consider data protection, system protection, etc.)

2. Name and briefly describe three “best practices” that should be used when
acquiring (purchasing) an EPP.

3. Name and briefly describe three “worst practices” that should be avoided when
selecting an EPP.

What factors might an organization consider

 

What factors might an organization consider

Computer Network Security
What factors might an organization consider when choosing to implement an AD-
integrated DNS zone versus a traditional zone? Describe a scenario in which it
would be preferable not to integrate a DNS zone into AD. Since the DNS zones can be
hosted on specific AD domain controllers, what factor(s) might go into deciding
which DCs will host DNS?