teaching-case-bank-solutions-disaster-recovery-and-business-continuity
teaching-case-bank-solutions-disaster-recovery-and-business-continuity
Essay Question 1.
CSIA 485 Project #1 Detailed Assignment Description
Read the Case Study posted for this assignment. Determine the information technology/security gaps and develop a security strategy that includes issues relating to confidentiality, integrity, and availability (CIA), and that includes the key elements relative to People, Process, and Technology.
Step 1: Describe the key issues/challenges/risks from this case study.
Step 2: Based on the information provided in the case study, describe and document the recommended security strategy to mitigate the issues/challenges identified.
Step 3: Describe the proposed security solutions and relationship to the case study.
Step 4: Document a detailed, proposed timeline for addressing each element of the strategy that you identify. Provide estimates for implementing recommended strategies, with rationale. Include what resources are necessary for completing each task in the timeline.
Step 5: Provide a high-level recommendation regarding the next steps to take in mitigating risks identified.
The deliverable for this case study assignment will be a minimum 5 page, double-spaced paper using Times New Roman 12 font and APA style formatting for citations and references. It will also include a minimum of 5 references. The Title/Cover page, illustrations (tables/charts/graphs), or references are not part of the page count but are required for the assignment. The grading rubric provides additional details as to what should be included in the paper. Your instructor may provide an APA style template to use for this paper.
Dicussion Question 1.Please read the following articles: Thought on Snowden
- http://www.cnn.com/2014/05/27/us/edward-snowden-interview/
- http://www.huffingtonpost.com/2014/05/27/edward-snowden-nbc_n_5400444.html
Snowden, during an interview with Brian Williams, stated that he was a trained spy within the context of conducting his normal job routine. What do you feel are the cyber implications that result from his actions and revelations? Please no editorial about his behavior or your patriotism…. let’s keep the conversation focused on cyber policies, cyber technologies, or cyber procedures.
Discussion Question2. ‘Threat Model Analysis’
Please read Microsoft’s Threat Model Analysis, http://msdn.microsoft.com/en-us/library/aa561499.aspx.
Now, describe what you learned. How could you use this model to help improve cyber security in an organization? Please discuss in detail.
