Lab Theory Assignment on Operations Security

December 16, 2022

Lab Theory Assignment on Operations Security

Order Number	636738393092
Type of Project	ESSAY
Writer Level	PHD VERIFIED
Format	APA
Academic Sources	10
Page Count	3-12 PAGES

Instructions/Descriptions

Lab Theory Assignment on Operations Security

Lab, Theory, Assignment, Operations, Security

In your browser, navigate to https://www.sans.org/reading-room/whitepapers/policyissues/information-security-policy-development-guide-large-small-companies-1331 .

Read Sections 1-5 of the SANS Policy Development Guide.

Question -1 Summarize the Policy Development Guide’s recommendations for organizing a policy hierarchy and selecting policy topics.

In your browser, navigate to https://www.cio.com/article/3243684/what-is-cobit-a-framework-for-alignment-and-governance.html .

Question- 2 Describe the core principles and objectives of COBIT 2019.

Review the following list of risks, threats, and vulnerabilities at the fictional Healthwise Health Care Company.

Unauthorized access from public Internet
Hacker penetrates IT infrastructure
Communication circuit outages
Workstation operating system (OS) has a known software vulnerability
Unauthorized access to organization-owned data
Denial of service attack on organization’s e-mail
Remote communications from home office
Workstation browser has software vulnerability
Weak ingress/egress traffic-filtering degrades performance
Wireless Local Area Network (WLAN) access points are needed for Local Area Network (LAN) connectivity within a warehouse
User destroys data in application, deletes all files, and gains access to internal network
Fire destroys primary data center
Intraoffice employee romance gone bad
Loss of production data
Need to prevent rogue users from unauthorized WLAN access
LAN server OS has a known software vulnerability
User downloads an unknown e-mail attachment
Service provider has a major network outage
User inserts a USB hard drive with personal photos, music, and videos on organization-owned computers
Virtual Private Network (VPN) tunneling between the remote computer and ingress/egress router

Question 3 – For each risk, threat, or vulnerability in the list above, select an appropriate security policy that might help mitigate it. You can select one of the SANS policies or choose one from the following list.

Security Policies

Acceptable Use Policy
Access Control Policy
Business Continuity—Business Impact Analysis (BIA) Policy
Business Continuity and Disaster Recovery Policy
Data Classification Standard and Encryption Policy
Internet Ingress/Egress Traffic Policy
Mandated Security Awareness Training Policy
Production Data Backup Policy
Remote Access Policy
Vulnerability Management and Vulnerability Window Policy
Wide Area Network (WAN) Service Availability Policy

Question 4 – Organize the security policies you selected so that they can be used as part of an overall framework for a layered security strategy.

A user at Digital Innovation Products has been using company network resources to download torrent files onto a USB drive and transfer those files to their home computer. IT tracked down the torrent traffic during a recent network audit. Unfortunately, the company does not have a current policy that restricts this type of activity.

Question 5 -Identify at least two appropriate policies that should be in place to define this type of behavior and the consequences thereof.

[Order Now]

Lab Theory Assignment on Operations Security

RUBRIC

Excellent Quality

95-100%

Introduction

45-41 points

The context and relevance of the issue, as well as a clear description of the study aim, are presented. The history of searches is discussed.

Literature Support

91-84 points

The context and relevance of the issue, as well as a clear description of the study aim, are presented. The history of searches is discussed.

Methodology

58-53 points

With titles for each slide as well as bulleted sections to group relevant information as required, the content is well-organized. Excellent use of typeface, color, images, effects, and so on to improve readability and presenting content. The minimum length criterion of 10 slides/pages is reached.

Average Score

50-85%

40-38 points

More depth/information is required for the context and importance, otherwise the study detail will be unclear. There is no search history information supplied.

83-76 points

There is a review of important theoretical literature, however there is limited integration of research into problem-related ideas. The review is just partly focused and arranged. There is research that both supports and opposes. A summary of the material given is provided. The conclusion may or may not include a biblical integration.

52-49 points

The content is somewhat ordered, but there is no discernible organization. The use of typeface, color, graphics, effects, and so on may sometimes distract from the presenting substance. It is possible that the length criteria will not be reached.

Poor Quality

0-45%

37-1 points

The context and/or importance are lacking. There is no search history information supplied.

75-1 points

There has been an examination of relevant theoretical literature, but still no research concerning problem-related concepts has been synthesized. The review is just somewhat focused and organized. The provided overview of content does not include any supporting or opposing research. The conclusion has no scriptural references.

48-1 points

There is no logical or apparent organizational structure. There is no discernible logical sequence. The use of typeface, color, graphics, effects, and so on often detracts from the presenting substance. It is possible that the length criteria will not be reached.