CSIA 413 University of Maryland Budgeting for Cybersecurity briefing paper
Programming
SECTION ONE: Budgeting for Cybersecurity
Prepare a two-page briefing paper (5 to 7 paragraphs) for the senior leadership and corporate board of Red Clay Renovations which addresses planning (what do we need to do?), programming (how will we do it?), and budgeting (how will we pay for it?) processes for IT security program management.
1. Use the company profile and enterprise architecture diagrams to identify five or more riskswhich require a financial investment. Financial investments should be categorized as: people investments, process investments, and/or technology investments.
2. Choose one of the four strategies for reducing the costs associated with responding to cyberattacks from the Rand report (A Framework for Programming and Budgeting for Cybersecurity):
- Minimize Exposure
- Neutralize Attacks
- Increase Resilience
- Accelerate Recovery
3. Discuss how your selected strategy (make it clear which strategy you selected) can be used in the planning (what do we need to do?) and programming (how will we do it?) phases of budget preparation to identify less costly solutions for implementing technical, operational, and management controls.
Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your posting.
SECTION TWO: Briefing Statement for IT Security Audit Plan
Choose one of your two audit plans
- employee awareness of IT security policies
- assessment of the IT policy system
Prepare a one page briefing statement for the IT Governance board of Red Clay Renovations which explains the purpose of the audit and provides the following details:
- who will conduct the audit (and why)
- what will be covered by the audit (and why)
- when will the audit be conducted (does that date/time have significance to the organization (i.e., fiscal year end?))
- where will the audit be conducted (locations) (and why)
- how will be audit be conducted (what audit process?)
Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your posting.
Make sure you also use the discussion rubric when creating this response to ensure you have all the required elements.
