PROJECT 12.1: Using the Security Rating ScaleUsing the Security Rating Scale outlined at the beginning of this chapter, rate the security of your campus, home, or work computer systems and network.Provide clear reasons for each of your ratings on the scale and recommendations for ways to improve the system’s security.

PROJECT 12.1: Using the Security Rating ScaleUsing the Security Rating Scale outlined at the beginning of this chapter, rate the security of your campus, home, or work computer systems and network.Provide clear reasons for each of your ratings on the scale and recommendations for ways to improve the system’s security.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter11: Security Maintenance

Section: Chapter Questions

Problem 1DQ

See similar textbooks

Similar questions

The computer lab of a local college needs a one-page document that it will distribute to its incoming students to increase their security awareness. After reading the information presented in this module and other sources, prepare a document, which should include a 10-item bullet list of the things that students must remember to reduce the risks of using information technology. After reading the information presented in this module and other sources, write a one-page paper about three high-profile companies that faced security breaches in the last two years. Identify two vulnerabilities that enabled hackers to break into these companies’ systems. Denial of service (DoS) is among the security threats that have been on the rise in recent years. After reading the information presented in this module and other sources, write a one-page paper that outlines four recommendations for dealing with this security threat. Cite three U.S. companies that have been among the victims of this security…
The CISO reaches out to complains about the interns who appear to be violating many security policies. They do not lock their workstations, download illegal music, connect their personal devices to the organization's computers, spend too much time on social media, and even download pornography to the organization's computers. The CISO asks you to address these violations by developing a security document (Rules of Behavior) stating at least 15 rules about what activities employees are not allowed to conduct on the network.
Make sure you submit your proposal for a security education program. Artifacts that have been finished and polished are supposed to have all their parts. The input that was used to create it should be reflected in its final form. The proposal will include an executive summary, a communication plan, an introduction, the proposal's policies and procedures, the proposal's main body, the proposal's main body, the policies and procedures, the recommended remedies to security weaknesses, and the strategies to constantly monitor the company for hostile conduct.
Suppose we had to put our current Yoga application into production, and despite the fact that we had installed a firewall, we had to identify three (3) significant and distinct areas in which our application and its environment were still vulnerable, and then list some possible ways in which we would have to protect those vulnerabilities. What would we do if we had to do this? Keep your writing specific, comprehensive, and critical-thinking-intensive. Consider that you're writing this for your bosses and that your job is on the line. However, keep it to three paragraphs or less. Each paragraph should include a clear list of vulnerabilities, as well as at least one mitigation for each vulnerability. Predicted word count: three well-structured yet succinct paragraphs
Computer Security is one of the fastest-moving fields in the world today. There are generally several incidents each week, including data breaches, large scale attacks, or some advancement in security research (i.e. new tools, techniques, vulnerabilities, or exploits). Select a recent event from your favorite security news source and summarize it. Include your source and an analysis of the event, including a summary of what happened, any new information from the event that changes current security practice, and any larger scale implications from the event. Relate the event to the topics in Chapter 1 of the book, namely the CIA triad, U.S. Compliance Laws (if any), IT domains, security policy, and/or data classification. In addition, relate the event to a biblical example.
It is common knowledge how important it is to have proper security rules and to consistently enforce them. Describe the importance of creating, implementing, and maintaining security policies.
The majority of individuals agree that creating proper security rules and consistently implementing them are necessary actions to take. Describe the importance of creating, implementing, and maintaining security policies.
Physical Security Survey In this project you will perform a survey of the physical security at your school or workplace. Identify vulnerabilities in the design and use of the following aspects of the facility: Use of locking doors at main entrances Access to sensitive areas Cabling, communications, or computing equipment readily accessible Video surveillance Personnel badges Loading area Fire suppression Make a list of issues you found. Include a categorization of risk and a suggested remedy to reduce the risk. Do not enter any “employee only” areas during this exercise unless you have obtained permission in advance or are escorted by authorized personnel
Using a graphics program, design several security awareness posters on the following themes: updating antivirus signatures, protecting sensitive information, watching out for e-mail viruses, prohibiting the personal use of company equipment, changing and protecting passwords, avoiding social engineering, and protecting software copyrights. What other themes can you imagine?
Viruses are defined as an erroneous software program that is difficult to detect and that spreads fast through computer systems, damaging data or interfering with the operation of processor and memory systems.Discuss the many forms of software that have been linked to computer viruses in the past.Using firewall machines and software, which are often referred to as firewalls, it is possible to gain control and security over the Internet and other networks. Firewalls have a number of characteristics and functions, which you must describe.
Operating systems and the vast majority of other forms of software include bugs when they are originally released. Existing software contains tens of thousands of errors, sometimes known as bugs. By providing updates, software companies consistently address recognized issues with published software (also known as patches). The day after the public disclosure of a new vulnerability, hackers and other criminals often conduct zero-day attacks to exploit it. No one can disagree that these criminals' activities are immoral, but what obligation does a software company have if their ignorance or hurry to market harms customers? What responsibility do computer users have regarding the installation of security updates?
Cybersecurity Risk Assessments: Probability vs. Possibility. When performing a risk analysis, we want to focus on what is probable versus what is possible. The goal is to make well-informed decisions based on probable outcomes of future events. Is it possible that a grizzly bear will walk through your office door and maul you? Sure! Almost anything is possible. But is it probable? No. As the Head of IT (or IT Security) what are the three most critical risks for your whole organization to mitigate (in tech or security)? Please discuss risk, controls (present or missing), and risk monitoring and effectiveness testing.