Category: Uncategorized

Research the elements of a multilayered security plan

You are a network security specialist at Richman Investments, a mid-level financial investment and consulting firm. The Richman corporate headquarters is located in Phoenix, Arizona. Currently, there are eight branch offices in: Atlanta, Georgia Chicago, Illinois Cincinnati, Ohio Denver, Colorado Los Angeles, California Montreal, Canada New York City, New York Washington, D.C. You received an e-mail from your supervisor stating that you need to create an outline of the general security solutions planned for the safety of data and information that belongs to the organization. You are told that every month, the networking division needs to submit a report to the senior management about the security plan for the month, and your outline will become a part of that report.

You need to research the elements of a multilayered security plan and to create a detailed outline. Your outline should indicate one or more general security solutions for each of the seven domains of a typical IT infrastructure.

Consequences of the security breach

Objective
Analyze the impact of security breaches

Instructions:
1. you need to select a particular security breach that happened in the recent past. You need to search the Internet to find a security breach that you can analyze. Once you select a particular security breach to work on, other students cannot select the same.
2. Analyze the selected security breach. Here are some key questions you need to think about and address in your assignment.
a. What caused the breach? Could it have been avoided?
b. What are the consequences of the security breach? That is, how did it affect the various stakeholders?
i. Stakeholders include shareholders, customers, suppliers, employees, etc.
ii. Retrieve the stock price of the company for a month before and a month (or less if it a recent breach that happened within the last month) after. Plot this data in an appropriate chart. What is this chart suggesting?
c. In your opinion, how did the organization respond to this breach?
i. What did the organization do and should have done (but did not do) after the breach?

General Instructions
? [Provide your analysis in a Word document along with the chart that you created
Length: between 350 and 450 words
?Cite all your sources. Provide full citations (you can use any citation format).

Describe the main elements of data breach notification laws

Discussions

Info Systems

Discussion 1

“The New Beginning and Prototyping” Please respond to the following:

• Evaluate prototyping as a technique for gathering quality business requirements. Determine the approach to prototyping that would be better suited for emerging technology projects.Determine if a combination of prototyping approaches would be more efficient. Explain your answer.

Discussion 2

“Risk Management” Please respond to the following:

• Explain why project risk management is a key component to bringing a project to a successful conclusion and describe the relationship between project risk management and cost estimation.

Computer Ethics

eActivity

• Organizations need to be aware of, and comply with, the Payment Card Industry – Data Security Standards (PCI-DSS) to ensure the safeguarding of cardholder information. Review the PCI-Data Security Standard, located at https://www.pcisecuritystandards.org/security_standards/, and be prepared to discuss.

“Data Breach Notification” Please respond to the following:

• Due in large part to breach notification laws, we have heard about many more data breaches in the past few years.

o From the e-Activity, describe the main elements of data breach notification laws. Discuss the importance of breach notification for credit card information, as it relates to PCI-DSS.

o Describe the concept of a safe harbor and how that impacts an organization when developing its security methods. Determine if breach notification laws should define a minimum level of encryption to qualify for safe harbor and describe why or why not.

Difficulties in prosecutions of computer-related crimes

Part 1: Q1: choose best one, Please provide reason of your choice in a few sentences, in your own wordsand/or reasons not choosing the other choices. A mere mention of the textbook or reproduction of the textbook statements would not serves as the reason. Restating the problem in your own words also does not constitute as the reason. Sometimes defining the terms may give you a clue to the reason.

1. What piece of legislation allows computer records documenting criminal activity to be used in court?
a. Federal Rules of Evidence 803(6)
b. Federal Computer Documents Rule 703(a)
c. Digital Signature Bill
d. National Infrastructure Protection Act
___
Reason:
2. How should you NOT report computer crime?
a. e-mail
b. telephone
c. tell management in person
d. tell the IT department in person
___
Reason:
3. What is most often overlooked when planning for information security?
a. firewalls
b. education
c. virus scans
d. electronic surveillance
___
Reason:
4. Which of the following is NOT a reason for the difficulties in prosecutions of computer–relatedcrimes?
a. The area of litigation is extremely technical and difficult to understand.
b. The laws themselves are relatively new and untested.
c. Most of the crimes do not fall under any of the current laws
d. The technology is very dynamic and the tactics of the perpetrators are constantly changing.
___
Reason:
5. What is authentication?
a. the act of binding an entity to a representation of identity
b. the act of ensuring that information is being sent securely
c. the act of ensuring that the receiver of information actually received it
d. the act of binding a computer system to a network
___
Reason
6. What is not considered the misuse of information?
a. the deletion of information from a system
b. the untimely release of secret information
c. the illegal sale of information to rival companies
d. the misrepresentation of information
___
Reason:

7. How does a client machine find the web address associated with a particular URL?
e. It uses translation software in the interpreter.
a. It sends a message to the nearest domain name server.
b. It uses hashing to translate the address.
c. It sends a message to the URL server.
___
Reason:

8. What does the first field of a cookie contain?
a. chocolate chips
b. encryption algorithm
c. public key for the site
d. name of the issuing site
___
Reason:

9. Which security solution is best for protecting the information system connected to the Internet?
a. virus scanning software
b. encryption
c. biometric authentication
d. firewalls
___
Reason:

10. A(n) ___________ accomplishes many of the same goals as a firewall, but is more limited in scope.
a. proxy server
b. screening router
c. IDS
d. ICQ
___
Reason:
Q2

QII.1 For a public-key encryption system, list reasons,
1) in favor of
2) and against
for using the same key pair for the encryption and the digital signature

QII.2 Describe “inference controls”
Give reasons why theyare needed.
And give specific examples(at least 3), and
Describe how the inference controlsare implemented; how they serve the purpose(effective) in a database.

QII.3 Describe the “crypto dilemma.”
Suggest 3 waysto address the “crypto dilemma.”
State the pros and cons of each way.

Part 3:

An enterprising group of entrepreneurs is starting a new data storage and retrieval business, SecureStore, Inc. For a fee, the new company will accept digitalized data (text and images, multimedia), and store it on hard drives until needed by the customer. Customer data will be transmitted to and from SecureStore over the Internet. SecureStore guarantees that the confidentiality and integrity of the datawill be maintained.

SecureStore also envisions certain information assurance requirements for their internal operations. Company employees will need to exchange confidential email, and will need a mechanism for verifying the integrity and originator of some email messages. Also, SecureStore intends a daily backup of all customer data to a remote facility via a leased line. They wish to do so as economically as possible, while ensuring the data’s confidentiality and integrity.

SecureStore is interviewing candidates for the position of Chief Information Officer (CIO). They are asking candidates to describe briefly how they would satisfy SecureStore’s requirements as stated above. How would a successful candidate respond?

First, distill the requirements from the above statement

Write paper about information security and cyber security

Write paper about the following topics- information security, cyber security, and risk management with relation to cloud computing including things like risk management.

Describe each of the six stages of the employee life cycle

IT Security and Policies Assignment

Question One – There are two approaches to information security policies: the parallel approach and the integrated approach.

a) Explain each of them.

b) Which one is more efficient? Explain your response.

Question Two – Describe each of the six stages of the employee life cycle using your own words.

Question Three – Define and provide examples for the following using your own words:

a) Information assets

b) Information system

Question Four – a) Based on what the Federal Information Processing Standard 199 (FIPS-199) requires information owners to classify information and information systems? Provide a detailed answer.

b) Are there any differences between classifying governmental information and commercial information? And are there any common levels of classification have been used to classify governmental information and commercial information? Explain your answers and supported them with examples (NOT from the book or slides).

c) Can a company make a change on classified information? Assuming now a company feels that such information need higher protection or the company decide to make some information that was classified as secret to be accessed by public. Here, is there any mechanism or process that allows a change in classified information. Explain your answers and supported them with examples (NOT from the book or slides).

Describe the purpose of a ddos attack

Describe the purpose of a DDoS attack. How is a DDoS attack configured? How can DDoS attacks be detected and prevented? Research the internet for a DDoS attack. Describe the events. Your reply should be at least 125 words.

Will be submitted through safeassign.

Analyze how coppa and cipa are similar and different

Computer Ethics Paper

Assignment: COPA and CIPA

The Children’s Online Privacy Protection Act (COPPA) and the Children’s Internet Protection Act (CIPA) are both intended to provide protections for children accessing the Internet. However, they both have had some opposition.

Write a three to five page paper in which you:

1. Describe the main compliancy requirements and the protected information for both COPPA and CIPA.
2. Analyze how COPPA and CIPA are similar and how they are different, and explain why there is a need for two different acts.
3. Describe what you believe are the most challenging elements of both COPPA and CIPA to implement in order to be compliant.
4. Speculate on why COPPA and CIPA define protection for different ages; COPPA defines a child as being under the age of 13 and CIPA defines a minor as being under the age of 17.
5. Identify the main opposition to COPPA and CIPA based on research and speculate on whether they will be changed in the future based on the opposition.
6. Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

o Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.

o Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

The specific course learning outcomes associated with this assignment are:

o Explain the concept of privacy and its legal protections.
o Describe legal compliance laws addressing public and private institutions.
o Use technology and information resources to research legal issues in information security.
o Write clearly and concisely about information security legal issues and topics using proper writing mechanics and technical style conventions.

Explain problems nats create for ipsec security

Discuss some of the problems NATs create for IPsec security. (See [Phifer 2000]). Can we solve these problems by using IPv6? Why deployment of IPv6 has been slow to date. What is needed to accelerate its deployment?

Create a three-year organizational systems management plan

Resource: Patton-Fuller Community Hospital Networking Virtual Organization, or, an organization you are familiar with that you can research to discover the cabling, network equipment and structure.Resource: Patton-Fuller Community Hospital Networking Virtual Organization, or, an organization you are familiar with that you can research to discover the cabling, network equipment and structure.
Create a 3-year organizational systems management plan incorporating current trends and security concerns.
Include the following:
• Strategic goals that the 3-year plan must support or align to • An ability for the organization to upgrade its network transmission speed or bandwidth during the 3-year plan and beyond • Change management plan • Replacement schedule for networking and computing devices • Configuration management processes • Network and application software upgrades and replacement • Contingency planning when unforeseen future hardware, software, and networking technology or processes that may be disruptive must be procured for the organization to remain competitive • Upgrades to network and application security, if appropriate, to include any missing network devices that provide security over several layers of the OSI model • Upgrades to wireless technology if appropriate • Upgrades or procurement of specific network components that will enhance transmission speed, accuracy, or availability, based on an analysis of the network Priority list of the items that must be procured or require funding so that the budget execution authority can cost and plan for procurement.