Category: Uncategorized

Explain importance of explicit enterprise security policies

Write a cumulative 10- to 12-page paper incorporating your prior work. Solve the design problems of your Virtual Organization. Illustrate all network design using Microsoft® Visio®.

Address the following in your paper:

· Include a final network design.

· Include a timeline for the project.

· Explain the design approach and rationale.

· Analyze the detailed design.

· Prove that the design meets the data rate requirements.

· Analyze the existing security situation in the organization.

· Identify the predominant electronic and physical threats to communications networks.

· Explain the importance of explicit enterprise security policies and procedures.

· Describe potential threat detection and protection techniques.

· Explain the importance of explicit enterprise security policies and procedures.

· Describe how firewalls mitigate some network attack scenarios.

· Describe common security concerns inherent to wired, wireless, and mobile networking.

· Design a security hardware and software environment that will protect the organization.

Evaluate the benefits of upgrading software

When you are confident that you have met all requirements for this assessment task, upload your file using Study Smart for marking.

Make sure your work follows the style guide and naming conventions presented in the Style Guide document available in the Learning and Study Support section of Study Smart.

As a member of Small Business Intranet’s task management group, you have successfully completed a basic domain controller in Assessment Task using Windows 2003/2008 Server. This server is to be used as an evaluation tool to help management decide the best possible replacement for the company’s existing domain controller. If you have not completed Assessment Task, please contact your facilitator for further instructions.

This assessment requires you to continue refining the domain controller created in Assessment Task 1. In order to fully evaluate the benefits of a domain controller in Windows 2003/2008, you will be asked to configure the domain controller with the needs of Small Business Intranet, in terms of application software, usability and security.

Before starting this process, please ensure that you have a complete backup (ghost image etc.) of your domain controller. The Windows 2003 or 2008 server will be referred to as a Windows 200X server in the following sections.

Resources you will need:

• Computer capable of running Windows 200X server and operating system software. It should be set up as a Windows 200X server configured with Active Directory, DNS, DHCP and Terminal Services (Administration mode). The server build from Assessment Task 1 is preferable.

• Network cards, cables and modem (for internet access).

• Computer capable of running Windows 2000 Professional or XP Professional and operating system software.

• Windows 200X build disk and service pack 1 available from Martin College.

• Norton’s ghost (or similar product) to enable you to regularly backup your system. (Not available from Martin College.)

• Windows 200X server text (your choice) and internet access.

You will need to complete the following tasks:

1. Research client requirements – application software

This task allows you to demonstrate your ability to examine a business’ requirements for application software and recommend appropriate software solutions.

Small Business Intranet is suffering from the use of an out-dated application software package. Office 95 is no longer supported by Microsoft and cannot handle new data types such as embedded video or web content. Its ability to transfer data to other applications is also limited. Management has requested information about what recommendations you have for a new replacement application software. It should include word processing, spreadsheet, database and presentation software. They would like to add assessment management software to the network in any software upgrade.

You are to:

• Research the requirements of Small Business Intranet for an application software suite. Small Business Intranet currently uses Microsoft Office 95. All information regarding Small Business Intranet’s current system requirements can be extrapolated from WITSIM IT operational plan.

• Evaluate two possible replacement packages, one of which should be an upgrade to the current version of Microsoft Office.

• Evaluate the benefits of upgrading software as opposed to starting with a new produce line.

• Create a report containing your evaluation. This should have an overview of the purpose of the report, a brief (one page each) summary of the two best current application software packages and a recommendation as to which would be best suited for Small Business Intranet.

Additional information may be attached as appendices to the report. The report should include details related to the package’s cost, supplier, after sales support (and cost) and the installation requirements for the host computer.

2. Corporate purchasing procedures – purchase orders

This task allows you to demonstrate your ability to research the licensing and purchase details of a software package(s).

You are to:

• Select the most appropriate software reseller to source the application suite recommended in task 1.

• Investigate what licences are available and which is the most appropriate licence for the software.

• Price the total software purchase cost for Small Business Intranet.

• Create a memo detailing this information and requesting approval for the purchase to proceed.

• Create a purchase order that follows the purchasing guidelines and procedures in Small Business Intranet’s IT Operational Plan. The purchase order must follow the Small Business Intranet procedures related to purchasing items.

3. System utilities – system monitor

This task allows you to demonstrate your ability to use system monitoring tools to determine the system load of business processes.

You are to:

• Install the network monitoring service on your domain controller. Alternatively, many third party software products exists that will capture the performance of the host computer under working conditions.

4. Software deployment – planning

This task allows you to demonstrate your ability to research, plan and document impending system changes based upon an approved system change request.

You have received authorisation for the deployment of the new application software package(s). The authorisation requires you to make every attempt to minimise the impact of the software deployment on the staff.

You are to:

• Examine the application software package to see what tools are supplied by the manufacturer to support the remote installation of application software across a network.

• Examine your operating system for tools which support the remote installation of application software across the network.

• Examine any third-party software distribution tools which support the remote installation of application software across the network.

• Determine the best method for deploying the application software package across the network.

• Determine the best method for restoring the system in the event of deployment failure.

• Document your findings about the most appropriate distribution method in a memo, including your justification and information resources.

5. Software deployment – implementation

This task allows you to demonstrate your ability to deploy software over a network with minimal disruption to clients.

You are to:

• Using the deployment strategy decided on in task 4, prepare a procedure for the deployment of software across the Small Business Intranet network. This procedure must include actions to be taken to restore the current configuration should the deployment fail.

• Using the test unit OU and test user account in your Active Directory structure from Assessment Task 1, deploy the software according to your procedure.

• Test the installation by logging in as the test user.

• While installing, record the time taken, network traffic generated and server CPU utilisation during the installation process for the test user.

• Using the resource information gathered from the single user installation, determine the system’s capacity to deploy this software with minimal impact upon other users. This information can then be used to estimate the network resource requirements of rolling out this software to the company’s employees.

• Produce a memo recommending a software deployment schedule for the entire company for both the client operating installation and application software deployment. It should state any bandwidth, server utilisation and time implications.

6. User training – application software

This task allows you to demonstrate your ability to research and recommend appropriate staff training for new technologies.

You are to:

• Research the most appropriate update training program for employees of Small Business Intranet who need to update their skills for the new software package.

• Identify the most appropriate and cost effective provider of the training program.

• Design an evaluation questionnaire that could be completed by staff members at the end of any training program. Information from this could be used to evaluate the effectiveness of the training package.

• Produce a memo outlining your training recommendations, complete with information on the training program, the preferred training supplier and the expected cost of the program.

7. Technical training and documentation – change management procedure for software deployment

This task allows you to demonstrate your ability to manage, inform and demonstrate system changes.

You are to:

• Produce a small memo/email alerting users to the pending software deployment and the procedures they are required to follow during the installation.

• Document the software deployment procedure for other technical IT staff to follow during the companywide software deployment.

• Demonstrate the deployment procedure for other technical IT staff who may have to implement this in the future.

8. User configuration – user account restrictions

This task allows you to demonstrate your ability to ensure that user accounts meet business security requirements.

You are to:

• Ensure that the test user account meets the requirements set out in the IT Operational Plan. In particular, ensure that:

i. The test user account details match the requirements in the Network Security – User Accounts section. ii. The account’s roaming profile matches the requirements in the Client Computer Configuration section. iii. The group policy for the test OU matches the requirements in the Network Security – User Accounts section. iv. The login script for the Test OU matches the requirements in the Network Security – Login Scripts section.

• Modify the default user profile to hold a copy of the test user profile, which should match the requirements of Small Business Intranet. To test that it works, create a new user who should inherit the profile.

• Enable system wide auditing of Logon events as required by the Network Security – User Accounts section of the IT Operational Plan.

• Enable encryption of data on the test user’s home folder.

9. Group policy – user access restrictions

This task allows you to demonstrate your ability to create group policy objects which limit the users’ access to the system according to the employers requirements.

You are to create a group policy for the test OU that:

• Redirects users’ My Documents folder to their home directory on the server for all members of the OU.

• Hides the control panel and prevents browsing the network through My Network Places for all members of the OU.

Test this policy using the test user account created in Assessment Task 1. When satisfied, apply to the Administration and Accounting OUs only.

10. Operating system security – security analysis

This task allows you to demonstrate your ability to access independent security analysis tools to evaluate equipment in the network.

You are to:

• Obtain Microsoft documentation on default NTFS permissions, security groups and/or group policies for your operating system version. This can be accessed from the site http://support.microsoft.com/gp/hublist by selecting the appropriate operating system. Search the site for the required information.

• Run/download OS vendor security diagnosis tools such as Microsoft Baseline Security Analyser (MSBA) available from http://www.microsoft.com/technet/default.asp.

• Run/download third party security diagnosis tools which examine the security settings of your server. This may include http://scan.sygate.com/. Check your system against a number of such third party security checks.

• Write a brief memo summarising to management any updates that your server would require.

11. Operating system security – upgrades

This task allows you to demonstrate your ability to update your system’s security, based upon the manufacturer’s recommendations.

You are to:

• Solve any problems with your domain controller, raised in your memo (task 10). This may involve the modification of group policies, user accounts or the installation of the service packs. Document all changes made for future reference. Rerun the MSBA tool to view the effect of these changes.

• Identify the latest security patches for Windows 2008 server from the Microsoft site at http://windowsupdate.microsoft.com or alternatively, visit the Microsoft download centre. Record the names and sizes of these patches PRIOR to installing them.

• Configure your server to automatically update from the internet or other update source.

12. Demonstration – presentation

Demonstrate the work done in this assessment to your facilitator and other students. This demonstration should consist of:

• A practical demonstration of work done during each of the tasks completed in the assessment.

• A presentation of the main security weaknesses of your domain controller (task 10) and the corrective action taken to address each issue task.

The presentation itself is not assessable, but the quality of your domain controller configuration and your depth of knowledge will contribute to the marks allocated for each task.

Explore traffic behavior when designing a network

1. Why is it important to explore traffic behavior when designing a network? What problems could arise if you do not understand traffic behavior when you build a new network or upgrade a network?

2. In what ways are network management and network security interrelated? When designing for network management, what security concerns will you address? When designing for security, what network management concerns will you address?

3. Find a web site, an article on a web site or a peer reviewed article that is related to this weeks material. Write a 300 word synopsis what you have found and explain why you think it is relevant. Make sure you include the references and links to the article or web site.

Similarities and differences of compliance environments

Cybersecurity Compliance

Objective:

Analyze the compliance and regulatory issues that face U.S. companies with regard to cybersecurity and information technologies and how to address them within the policy framework.

Competencies: Information literacy, teambuilding skills, communication skills

The team assignment is an opportunity for project management in a virtual team environment-a vital skill practiced by emerging 21st century organizations. Team members likely will play varying roles of leadership, research, writing, editing, and organizing. Each member should have a significant role in research and writing, while selected members should be relied upon for their editing and organizing skills to integrate the paper from varying resources into a cogent, coherent whole.

Team Assignment #1

1. Select an industry or sector of mutual agreement among team members for analysis of the industry/sector’s compliance with applicable cybersecurity laws and regulations. Industries and sectors may include government (federal, state, local) or defense. Care should be taken in selecting an industry/ sector to capitalize on the background and strengths of individual team members and how those strengths contribute to completion of the overall assignment. Be aware that this assignment cuts across a whole industry/sector. As such, it likely will be necessary to study several representative organizations within an industry for comparative case studies. Thus the paper may take the form of several case studies cutting across applicable laws and regulations, culminating in an overall assessment of how the industry as a whole adheres to cybersecurity compliance standards. Another complementary approach likely will be to research the literature in academic, scholarly legal, and industry trade journals for relevant findings of experts on the topic of compliance with cybersecurity laws and regulations in the chosen industry/sector. Recognize that your research and analytical approach may not necessarily result in rigorous statistical validity and may fall into the category of anecdotal. Even if anecdotal, team members should garner expertise as to best practices within the industry.

Recognize that it may be necessary to cut across private and public sector interfaces of an industry because of government’s reliance on outsourcing to private enterprises. Although this may seem to complicate the analysis, it is likely necessary given the current debate regarding public-private sector partnerships to achieve national cybersecurity goals.

2. For the sector of your choice, critically analyze that industry/sector’s compliance with applicable cybersecurity laws and regulations. Each team

• discusses the similarities and differences of compliance environments

• discusses the values and issues with increasing compliance requirements

Prepare your paper in either Word format as your instructor requires. It should be 10-15 pages long, double-spaced with one-inch margins all around. The entire paper should be formatted in accordance with APA 6th edition guidelines

Discuss thoroughly vpns and how they are implemented

Describe the objectives and main elements of a cirt plan

Question: Term Paper: Managing Organizational Risk

No longer than a decade ago, IT security professionals had to work hard to persuade organizational leaders about the importance of developing effective risk management plans. Nowadays, due to the plethora of cautionary tales that organizations history provide, business leaders are informed on the need to manage risk and understand the crucial role of an organization’s IT infrastructure on its ability to perform business.

A computer incident response team (CIRT) plan can help prepare organizations for incidents that might occur.

Write an eight to ten (8-10) page paper in which you:

Describe the objectives and main elements of a CIRT plan.

Analyze the manner in which a CIRT plan fits into the overall risk management approach of an organization and how it supports other risk management plans.

Provide at least two (2) examples of how CIRT plans define the who, what, when, where, and why of the response effort.

Analyze the manner in which the development of a CIRT plan enables management to adopt a more proactive approach to risk management.

Include recommendations for remaining proactive in the continual improvement and update of CIRT plans.

Infer on the evolution of threats over the last decade that organizations must now consider.

Predict the evolution of regulatory requirements mandating risk management processes and plans.

Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow

APA or school-specific format. Check with your professor for any additional instructions.

Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

Create a Computer Incident Response Team (CIRT) plan for an organization in a given scenario.

Use technology and information resources to research issues in IT risk management.

Write clearly and concisely about topics related to IT risk management using proper writing mechanics and technical style conventions

Philosophy’s Pragmatic Value

Essay 3 and Response 3:

Now that we are nearing the end of the course surely you have a better about what makes philosophy philosophy.  In fact, given that you have made this far, you probably have a better understanding of philosophy than most.  For your fourth essay you will be exploring and explaining the philosophical process in your own words.  There are two options to choose from. Make sure you indicate which option you have chosen in the title of your essay. For example:

John Smith Essay 3 Option 2

Option 1: Philosophy’s Pragmatic Value

Part 1: What is philosophy?

What is meant by “philosophy” – particularly philosophy as a pursuit of truth that takes place in the context of a process of clarity and accuracy of thought.  Make sure you explain why this process is of central importance to philosophy.

Part 2: What practical value does philosophy have?

Now that you have experienced philosophy in a classroom setting, explain how philosophy applies to your life.  You may want to use a current situation you are involved in or you may want to explain how it will apply to your life in the future – say as a parent or in your career.  Either way, make sure you clearly and adequately explain the connection between philosophy and the situation in a manner which helps clarify the practical value of philosophy.

 Option 2: Philosophy and Paradigms

Part 1: What is philosophy?

What is meant by “philosophy” – particularly philosophy as as a pursuit of truth that takes place in the context of a process of clarity and accuracy of thought.  Make sure you explain why this process is of such central importance to philosophy.

Part 2: How do paradigms of thought relate to philosophy?

Now that you have experienced philosophy through a comparative survey of multi-cultural paradigms, explain the relationship between philosophy and paradigms of thought.  Explain in your own words how our “paradigmatic approach” to philosophical ideas and worldviews relates to the overall goal of philosophy.

The eastern ethical approach in real life terms

Essay 2 and Response 2:

There are three options for essay two below. Make sure you indicate which option you have chosen in the title of your essay. For example:

John Smith Essay 2 Option 1

Option 1: Ren and the human ethical condition

Confucian ethics revolves around “ren” – the benevolent character or “human-heartedness” that is at the basis of our humanity. While “humanity” and “morality” are commonly linked in western ethical theory, ren implies an essential interconnection between persons and roles. This interconnection goes all the way back to a metaphysical explanation of our human condition. In the case of ren an individual (or role) is not and cannot ever be an isolated entity; I am me and you are you in so much as we interconnection to each other. This also goes for our social roles. For example, a father or parent cannot be what he is without a child. Accordingly a father can become a good parent only through a recognition of the interconnection between him, “his” child and the family of which they are both a part. This means that to talk about “father” means we are equally talking about “child” and the overall “family” equally. Thus to be a good parent the father will learn from the son how to parent as much as the son will learn about life (and parenting) from the father.

For option one, think about the metaphysical explanation of the human condition that ren implies. If Confucius is correcthat we are that interconnected, what does this say about traditions or cultures that celebrate individuality and individual development as a central goal?

Your answer will be in two parts:

Part 1: To what extent are humans individual beings?

Most of us would agree that humans really are social creatures but the question is – What do the terms “social”, “relational” or even “inter-relational” creatures really mean?  Furthermore, what implication does your explanation of these terms have on our lives as individual social relational/inter-relational creatures?

Part 2: Given your answer to part one, explain the role of traditions in the human condition?

Confucius argued that humans are non-instinctual creatures in terms of our moral condition – we are choosing and leaning ethical creatures. If he is correct, what role does tradition play in our human ethical condition?

Make sure you define “tradition” and its parts. Then think about how traditions and mentoring relationships are carried out in our society today and in the past. Perhaps you would like to discuss the role has tradition played in your ethical life? If you do so, make sure you link your argument back to what you argued in part 1.

 Option 2: The eastern ethical approach in real life terms

In this section we have seen a ethical approach involving a strange relationship between “doing” and “not-doing”.  We discussed this ethical framework in Daoist ethics of Wu-wei, as well as, Hindu Dharma Ethics as Yogic Action.  For option two apply this doing/not-doing approach to a real world scenario.

Your answer will contain two parts:

Part 1: State and explain the ethical approach you will be explaining.

Make sure you explain who/what it involves, and how it involves them. For example if you choose wu-wei, make sure you explain wu-wei and its relation to the Dao and human action. Or if you settle on the yogic action approach make sure you explain what yogic action is, who it involves, and how it involves them.

Part 2: Apply the principle to a real world scenario.

You are welcome to use a personal experience or an abstract example. Either way make sure it is an example that your reader can connect with.  Furthermore, make sure you explain: (a) the context, to include who is involved, and (b) the application of the ethical principle from part one.

Option 3: Buddhist ethics of liberation

Like Confucianism, Buddhism also challenges our notion of an individual, exclusive self. However, Buddhism argues that the sense of self or the “ego-self” we feel behind our actions is but an illusion. This contrived ego-based-self is not only unreal, it is the source of our suffering. Explore this “self” you feel for option three.

You answer will contain two parts:

Part 1: What is the nature of the “self” (the “ego-self”)?

Who, what or where is this viewer behind the view?  From where or what does it arise?

Part 2: What role does this “ego-self” play in your life?

Is Buddha correct that the idea of self is the “home” and a significant “cause” of your suffering? If so, what can be done to avoid this undesirable suffering?

Ethics and Metaphysics

One of the themes that runs throughout the course is how we define ourselves as human. For Russell and Plato, to be human is to wonder, to explore the intellectual possibilities of life. Later in in the eastern paradigm we will see that Buddha agrees with Aristotle that to be human is to live a life of moderation. We will see that for Confucius and the Bhagavad-Gita, to be human is to understand one’s duty and our interconnection to others and the cosmos. Then the Native American paradigm will explain that being human entails a interconnection and responsibility to all of nature. All these explanation imply that to be human involves a great sense of responsibility.  This sense of responsibility fits within the teleological context of our human condition.

For this essay use the readings from this section as a springboard to explore the human ethical condition. After doing so come up with your own description of what it mean to be human. Your answer will contain two parts:

Part 1: Human Ethical Condition – What humans are

Explore and explain the key traits or characteristics of our human ethical condition. What traits or abilities make us ethical beings (able to consider ourselves and others in our actions)? Be sure to focus on our abilities beyond our physical form.

Concepts like reasoning, social (mutually dependent on ourselves and others to survive and thrive), emotional, active and interactive should come in handy. Be sure to explain what makes them what they are. For example, do not merely state that we are reasoning beings – explain what is meant by a faculty of reason.

Part 2: Human Telos*: What we want

Describe what human beings want from their lives. What is our ultimate purpose? Why we go to school, start a family, live in a community, etc. What are we ultimately seeking to fulfill with these actions and interactions?

Concepts like happiness, security, stability, well-being, peace may come to mind. Once you settle on a concept or two, you will need to go beyond merely stating them – you will need to explain what these things are. Teach the reader what you mean by “happiness” or “peace.”

*Note: Telos = teleological goal, the natural ultimate end goal or purpose of a thing. Aristotle, for example, explains that the telos of a builder is to build well. The telos of a bird could be described as flying well. The telos of a thing is based on the natural metaphysical essence or form of the thing in question. So, if humans are reasoning beings, then it would logically follow that the human telos would involve thinking and contemplation. For a further explanation on teleology see module 3 reading materials in “Western Paradigm Ethical Systems.”

Option 2: Ethics and Metaphysics

While “ethics” is a familiar term, the relationship between metaphysics and ethical evaluation is a new idea to many. For most “ethics” begins and ends with what should or ought be done. This approach pays little to no attention to what something is – the metaphysical being of the object itself. In philosophical ethics – and the process which it involves – the “is” description (or forms of things) is of critical importance.

For option two, explore the relationship between the metaphysical forms and ethical evaluation. You will do so in two parts:

Part 1: Briefly explain the essence, or first principles, of ethical actions and behaviors.

What is ethics? What makes “ethics” what it is and not something else?

In answering these questions start by addressing the sub-questions implied within – What makes a context an ethical context? What makes an ethical action a correct ethical action? What/whom does ethics or ethical actions involve? How does it involve them?

Part 2: What role do the metaphysical forms play in ethical evaluation? (see module 2 materials for a greater description of “metaphysical forms”)

If ethical evaluation is about standards of correct interpersonal actions and behaviors, what standards are to be used to evaluate a particular ethical act?

Do standards of ethical evaluation begin and end at the personal or cultural level or is there a standard that transcends these realms? If it is the personal or cultural, how can an action between persons from different cultures (or species) be evaluated? If ethical evaluation aims at impartiality, how can such a standard be discovered? Is it possible to judge a particular act or object by its general metaphysical form? These are the key questions for part two.

What are the major components of strategic management

Read the following: The leader of a local health care organization, Ken Janowski, has noticed other health care organizations successfully incorporating strategic management practices. Ken is considering using strategic management for his health care organization. He has hired you to research what the strategic planning development and implementation process is and to address why it helps organizations be successful.

Write a 700- to 1,050-word report of your findings in which you answer the following questions:

What are the major components of strategic management, and why is each component needed for success?

How are an organization’s mission and values important to strategy formulation?

What benefits does a strategic management process bring to a health care organization?

How does strategic management affect organizational decision making and financial performance?

How does strategic management affect the way an organization responds to its environment?

Cite a minimum of two scholarly references to support your information.

Format your report consistent with APA guidelines.