Friday 26 April 2019

CIS 542 WEEK 11 DISCUSSION Question

"Course Conclusion"
You have just completed ten (10) weeks of this Web application security course. Imagine you have been asked to create a one-day training course that highlights the important elements of what you have just learned within the past ten (10 weeks.

Create a list of the five (5) most important topics that you believe that a one-day course entitled “Web Application Security: The Essentials Presented in One Day” should address. Provide a detailed rationale for each of the five (5) topics.

https://hwacer.com/Tutorial/cis-542-week-11-discussion-question/

Create a list of the five (5) most important topics that you believe that a one-day course entitled “Web Application Security: The Essentials Presented in One Day” should address. Provide a detailed rationale for each of the five (5) topics.

Create a list of the five (5) most important topics that you believe that a one-day course entitled “Web Application Security: The Essentials Presented in One Day” should address. Provide a detailed rationale for each of the five (5) topics.

Create a list of the five (5) most important topics that you believe that a one-day course entitled “Web Application Security: The Essentials Presented in One Day” should address. Provide a detailed rationale for each of the five (5) topics.

CIS 542 WEEK 10 DISCUSSION Question

"Integrating Security"
Most of the security issues today can be traced back to flaws in application development. With this in mind, consider how a company can integrate best practices into their software development standards.

Review the SANS Institute’s InfoSec reading room paper titled “Integrating Security into Development, No Pain Required” found athttps://www.sans.org/reading-room/whitepapers/analyst/integrating-security-development-pain-required-35060. How does the approach of the Security Development Lifecycle differ from the Software Development Lifecycle? Which method—Microsoft or Agile—would you use if you had to develop software, and why? What other available resource could you recommend to a company interested in implementing this approach? Share your examples with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response and keep the discussion going.

https://hwacer.com/Tutorial/cis-542-week-10-discussion-question/

Review the SANS Institute’s InfoSec reading room paper titled “Integrating Security into Development, No Pain Required” found athttps://www.sans.org/reading-room/whitepapers/analyst/integrating-security-development-pain-required-35060. How does the approach of the Security Development Lifecycle differ from the Software Development Lifecycle? Which method—Microsoft or Agile—would you use if you had to develop software, and why? What other available resource could you recommend to a company interested in implementing this approach? Share your examples with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response and keep the discussion going.

CIS 542 WEEK 10 DISCUSSION Question "Integrating Security" Most of the security issues today can be traced back to flaws in application

CIS 542 WEEK 9 DISCUSSION Question

Social Networking Risks"
Social media and social networking are some of the newest tools used to market products and services to the public. Sales and marketing professionals love these tools since they reach consumers with great efficiency and with tailored results.

Many organizations do not allow office employees to use social networking sites and instant messaging software. Take a position for or against these policies and provide a rationale for your response. What if the company implemented a “Bring your Own Device Plan,” (BYOD)—would this change your opinion? Should employees be allowed to access these sites if they are at work? Using the Internet, look for any resources that suggest safer ways to implement these services in the workplace. Provide links to the tools or tips that you find and share with your classmates.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

https://hwacer.com/Tutorial/cis-542-week-9-discussion-question/

Many organizations do not allow office employees to use social networking sites and instant messaging software. Take a position for or against these policies and provide a rationale for your response. What if the company implemented a “Bring your Own Device Plan,” (BYOD)—would this change your opinion? Should employees be allowed to access these sites if they are at work? Using the Internet, look for any resources that suggest safer ways to implement these services in the workplace. Provide links to the tools or tips that you find and share with your classmates.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

CIS 542 ASSIGNMENT 2 Best Coding Practices

Assignment 2: Best Coding Practices
Due Week 9 and worth 215 points
You have been promoted to manager for the e-Commerce site for the company you made up in Assignment 1. You are concerned about the recent SQL attack. Your team reacted to the situation by notifying you immediately. You and your team were successful in containing and correcting the issues that allowed the Website and database to be compromised by a SQL injection attack.
Knowing that many of the issues can be created by human error, you have decided to evaluate the processes your team uses when they code. As their leader, it is your responsibility to be current on all of the best secure coding practices. Your job is to create guidelines for best coding practices, which you will present to your team.

https://hwacer.com/Tutorial/cis-542-assignment-2-best-coding-practices/

For Part I, you’re going to write a memo to the CEO and CSO documenting your guidelines based on your findings when you evaluated your company’s processes.

Justify why it is less expensive to build secure software than to correct security issues after a breach.
Outline the objectives and purpose of your company’s “best secure coding practices” and explain how it will influence your division.
Evaluate which method of the secure software development life cycle will best serve your team and explain how you plan on implementing your thoughts into your existing processes.
Identify three resources that can be used as “reference material” and act as a beginner’s guideline for new employees. Outline the importance of each resource and how each resource can assist new coders.
Use at least four quality references in this assignment. Note:Wikipedia and similar websites do not qualify as quality references. Be sure to CITE your sources with complete functioning Web links. Test the links to ensure they work before submitting your paper
Format your assignment according to the following formatting requirements:
- Typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page is not included in the required page length.
- Include a reference page. Citations and references must follow professional business language format.

Part II: PowerPoint Presentation
Create a PowerPoint presentation for your team in which you:

Outline the all of the major aspects of the Best Practice Coding guideline, including objectives, purpose, resources, and methodology. Note:Please include your fictional company’s name on each slide of your presentation. Remember, you’re planning on using this experience when you take what you’ve learned out into the real world.

The specific course learning outcomes associated with this assignment are:

Analyze common Website attacks, weaknesses, and security best practices.
Describe the attributes and qualities of secure coding practices and the tools used to conduct security verification.
Analyze the role and importance of quality assurance testing for Web applications using a security lifecycle.
Use technology and information resources to research issues in securing Web-based applications.
Write clearly and concisely about Web application security topics using proper writing mechanics and technical style conventions.

CIS 542 ASSIGNMENT 2 Best Coding Practices

CIS 542 WEEK 8 DISCUSSION Question

"Meltdown and Spectre Vulnerabilities"
One of the biggest concerns when a vulnerability is discovered is how to inform the public. Companies often subscribe to Security RSS feeds, so they are made aware of vulnerabilities quickly. One of the most critical vulnerabilities found today that affect both Websites and browsers is the Meltdown and Spectre vulnerability.

Research the Meltdown & Spectre vulnerability. Summarize your findings and describe the total global impact of this vulnerability. Search the Internet and locate Linus Torvalds’s comments on Meltdown and Spectre vulnerability. After you've reviewed Torvald’s comments, do you agree or disagree? Justify your rationale with other research on the topic. Are there tools available to verify if a computer is susceptible to this vulnerability? Share any additional useful links or tools you find with your classmates. Note:Please cite your sources for the research you reviewed by posting a link to the site in the discussion thread.
After reading a few of your classmate’s postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response and keep the discussion going.

https://hwacer.com/Tutorial/cis-542-week-8-discussion-question/

Research the Meltdown & Spectre vulnerability. Summarize your findings and describe the total global impact of this vulnerability. Search the Internet and locate Linus Torvalds’s comments on Meltdown and Spectre vulnerability. After you've reviewed Torvald’s comments, do you agree or disagree? Justify your rationale with other research on the topic. Are there tools available to verify if a computer is susceptible to this vulnerability? Share any additional useful links or tools you find with your classmates. Note:Please cite your sources for the research you reviewed by posting a link to the site in the discussion thread.
After reading a few of your classmate’s postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response and keep the discussion going.

CIS 542 WEEK 7 DISCUSSION Question

"Testing Websites"
It is important to test all Web applications for functionality and security. The Rough Auditing Tool for Security (RATS) is an open source tool used for this purpose, however it is accompanied by many other new tools.

Review the 14 Best Open Source Web Application Vulnerability Scanners [updated for 2018], found athttp://resources.infosecinstitute.com/14-popular-Web-application-vulnerability-scanners/#gref. After you’ve reviewed the document, selecttwoof your favorite tools, and compare and contrast the tools and determine the pros and cons for each of them. How often should security testing be conducted on a company’s Website, and how should they conduct the tests? What will happen if you don’t? Is there any benefit to having an outside company conduct the test? Provide your rationale. Share examples with your classmates and provide links to any useful resources you find.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

https://hwacer.com/Tutorial/cis-542-week-7-discussion-question/

Review the 14 Best Open Source Web Application Vulnerability Scanners [updated for 2018], found athttp://resources.infosecinstitute.com/14-popular-Web-application-vulnerability-scanners/#gref. After you’ve reviewed the document, selecttwoof your favorite tools, and compare and contrast the tools and determine the pros and cons for each of them. How often should security testing be conducted on a company’s Website, and how should they conduct the tests? What will happen if you don’t? Is there any benefit to having an outside company conduct the test? Provide your rationale. Share examples with your classmates and provide links to any useful resources you find.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

CIS 542 WEEK 6 DISCUSSION Question

"Compliance and Regulations"
Many recent breaches have involved payment card systems, otherwise known as point of sales (POS) terminals. The regulations and standards for POS systems is called the Payment Card Industry Data Security Standard (PCI DSS).

Research recent POS breaches, (find examples from within the last three years) and explain based on your reading in class what occurred. Explain why or why not you think the breach was preventable, as well as the overall impact the breach had on the business. In your opinion, if the breach was preventable and the company is found responsible should they be given a monetary penalty or should stricter legal action be taken, such as jail time? Justify your answer. Suggest or recommend any tool that could help to maintain compliance. Share examples with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial feedback and keep the discussion going.

https://hwacer.com/Tutorial/cis-542-week-6-discussion-question/

Research recent POS breaches, (find examples from within the last three years) and explain based on your reading in class what occurred. Explain why or why not you think the breach was preventable, as well as the overall impact the breach had on the business. In your opinion, if the breach was preventable and the company is found responsible should they be given a monetary penalty or should stricter legal action be taken, such as jail time? Justify your answer. Suggest or recommend any tool that could help to maintain compliance. Share examples with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial feedback and keep the discussion going.

CIS 542 WEEK 6 DISCUSSION Question

CIS 542 WEEK 5 DISCUSSION Question

"Web Security Verification"
Application security does not happen on its own. Organizations must recognize the value of security and make it a priority when developing applications.

Imagine that you are the IT Security Officer for a large company, and you have been assigned the task of implementing a Web application security verification model. List the factors you find are required, at a bare minimum, to make an application secure. Review relevant sites on the Internet and describe what tools or Websites can be used to automate such an assessment. In your opinion, which approach is more reliable: manual or automated verification? Why? Provide links to any tools that you find and share them with your classmates.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

https://hwacer.com/Tutorial/cis-542-week-5-discussion-question/

"Web Security Verification"
Application security does not happen on its own. Organizations must recognize the value of security and make it a priority when developing applications.

Imagine that you are the IT Security Officer for a large company, and you have been assigned the task of implementing a Web application security verification model. List the factors you find are required, at a bare minimum, to make an application secure. Review relevant sites on the Internet and describe what tools or Websites can be used to automate such an assessment. In your opinion, which approach is more reliable: manual or automated verification? Why? Provide links to any tools that you find and share them with your classmates.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

"Web Security Verification"
Application security does not happen on its own. Organizations must recognize the value of security and make it a priority when developing applications.

Imagine that you are the IT Security Officer for a large company, and you have been assigned the task of implementing a Web application security verification model. List the factors you find are required, at a bare minimum, to make an application secure. Review relevant sites on the Internet and describe what tools or Websites can be used to automate such an assessment. In your opinion, which approach is more reliable: manual or automated verification? Why? Provide links to any tools that you find and share them with your classmates.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

CIS 542 WEEK 5 DISCUSSION Question

CIS 542 Assignment 1 Malicious Activity

Assignment 1: Malicious Activity
Due Week 4 and worth 175 points
You are a manager of a Web development team for a fictional international delivery service. Please give your fictional business a name, and provide a sentence or two of background information about the company. Your team maintains all of the e-commerce servers, including creating and updating all of the content on the Web pages and the database that stores customer information. These are mission critical servers.
You have 4 clustered nodes that are used for load balancing. These nodes are located in 4 cities around the globe. Two are in the USA, one is in Europe, and one is in Asia.
The choices of cities and countries is yours:
Node1: City___________Country___________
Node2: City___________Country___________
Node3: City___________Country___________
Node4: City___________Country___________
Each site is interconnected, and gets regular updates from the home office, located in a different city & country that you will choose.

https://hwacer.com/Tutorial/cis-542-assignment-1-malicious-activity/

A TCPDUMP is scheduled daily so the team can analyze real time traffic using WireShark. A team member alerts you to a potential problem found in <NODE OF YOUR CHOICE> capture. There is an alarming amount of activities from port 40452, which shows a redirect to the index.php page instead of the login.phppage. It appears this node has been compromised with a SQL Injection Attack. You rely on these sites so you are unable to shut down all e-commerce activities.
For this Assignment, please write a report to the new CEO. Describe your network as you have set it up. Describe your reasoning for the way you distributed the network. Then, in fully-developed explainations, address each of the following:

Explain the immediate steps you would instruct your team to use to contain the attack, but also to maintain the service to the e-commerce site.
Summarize the steps required to mitigate all future occurrences of this type of attack, including how to verify that the vulnerability has been rectified.
Evaluate the OWASP Top 10 2017, found at https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdfand list three more potential vulnerabilities. Provide specific mitigation strategies to address each risk.
Use at least four quality references in this assignment. Note:Wikipedia and similar Websites do not qualify as quality references. Be sure to CITE your sources with complete functioning Web links. Note: Test the links to ensure they work before submitting your paper.
Format your assignment according to the following formatting requirements:

- Typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page is not included in the required page length.
- Include a reference page. Citations and references must follow professional business language format. The reference page is not included in the required page length.

The specific course learning outcomes associated with this assignment are:

Analyze Web traffic and log files for malicious activities
Analyze common Website attacks, weaknesses, and security best practices.
Use technology and information resources to research issues in securing Web-based applications.
Write clearly and concisely about Web application security topics using proper writing mechanics and technical style conventions.

CIS 542 WEEK 4 DISCUSSION Question

"OWASP Top 10"
The Open Web Application Security Project came into existence December 1^st 2001, and is still used for the development of Web applications.

Go to the Open Web Application Security Project (OWASP) Website, located at https://www.owasp.org/index.php/Main_Page, and find their “Top 10.” Review the OWASP top 10 Web Application Security Risks for 2017. What are the most significant changes since 2013? Choose one of the items and look at it closely. For example, number 10 is “Insufficient Logging and Monitoring”; what is recommended to prevent this risk? What does that mean to you based on your experience in this class so far? Knowing the importance of identifying threats, how should developers be responsible for log files and monitoring. Justify your answers. Share your findings with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial feedback and keep the discussion going
https://hwacer.com/Tutorial/cis-542-week-4-discussion-question/
.

"OWASP Top 10"
The Open Web Application Security Project came into existence December 1^st 2001, and is still used for the development of Web applications.

Go to the Open Web Application Security Project (OWASP) Website, located at https://www.owasp.org/index.php/Main_Page, and find their “Top 10.” Review the OWASP top 10 Web Application Security Risks for 2017. What are the most significant changes since 2013? Choose one of the items and look at it closely. For example, number 10 is “Insufficient Logging and Monitoring”; what is recommended to prevent this risk? What does that mean to you based on your experience in this class so far? Knowing the importance of identifying threats, how should developers be responsible for log files and monitoring. Justify your answers. Share your findings with your classmates and provide links to any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial feedback and keep the discussion going.

CIS 542 WEEK 3 DISCUSSION Question

"Analyzing Web Traffic"
Understanding corporate Website traffic helps to detect potential threats. Consider the following as you answer this Week’s Discussion Question:

Your CIO has asked you to research Network Forensic Analysis Tools (NFAT). Describe the purpose of NFAT as you understand it, and how these tools can assist with an investigation. Compare and contrast your favorite NFAT tools and make a recommendation as to which tool you think would be best. Make sure to justify your answers with facts and provide links to useful resources that would help solidify your answers.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

https://hwacer.com/Tutorial/cis-542-week-3-discussion-question/

"Analyzing Web Traffic"
Understanding corporate Website traffic helps to detect potential threats. Consider the following as you answer this Week’s Discussion Question:

Your CIO has asked you to research Network Forensic Analysis Tools (NFAT). Describe the purpose of NFAT as you understand it, and how these tools can assist with an investigation. Compare and contrast your favorite NFAT tools and make a recommendation as to which tool you think would be best. Make sure to justify your answers with facts and provide links to useful resources that would help solidify your answers.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

"Analyzing Web Traffic"
Understanding corporate Website traffic helps to detect potential threats. Consider the following as you answer this Week’s Discussion Question:

Your CIO has asked you to research Network Forensic Analysis Tools (NFAT). Describe the purpose of NFAT as you understand it, and how these tools can assist with an investigation. Compare and contrast your favorite NFAT tools and make a recommendation as to which tool you think would be best. Make sure to justify your answers with facts and provide links to useful resources that would help solidify your answers.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

CIS 542 WEEK 2 DISCUSSION Question

"Protecting Personal Identifiable Information (PII)"
Your labs focus on Personal Identifiable Information (PII), which companies are responsible for protecting. Companies collect this information from employees and clients and typically store it in a database, making this an attractive target to hackers.

Using the Internet, research methods you think corporations can use to protect themselves and their customers from security breaches involving PII. What tools or methods could you recommend to a company interested in determining the exposure of PII? Share your examples with your classmates and provide linksto any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response to keep the discussion going.

https://hwacer.com/Tutorial/cis-542-week-2-discussion-question/

Using the Internet, research methods you think corporations can use to protect themselves and their customers from security breaches involving PII. What tools or methods could you recommend to a company interested in determining the exposure of PII? Share your examples with your classmates and provide linksto any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response to keep the discussion going.

Using the Internet, research methods you think corporations can use to protect themselves and their customers from security breaches involving PII. What tools or methods could you recommend to a company interested in determining the exposure of PII? Share your examples with your classmates and provide linksto any useful resources you find.
After reading a few classmate postings, reply to the ones where you learned something new, or have something to add. Get in early to post your initial response to keep the discussion going.

CIS 542 WEEK 2 DISCUSSION Question

CIS 542 WEEK 1 DISCUSSION Question

Web Application Security"
Web application developers have to be mindful of security vulnerabilities when they develop their Web applications (e.g., online banking).

Select a Web-based attack, summarize the type of attack, and provide a recent example in the news (within the last three years) of an attack like this having occurred. What best practices would you follow to prevent this type of attack? Are there any Internet resources that you could recommend that would help developers with best coding practices? Share these resources with your classmates and provide links to any useful resources you find.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

https://hwacer.com/Tutorial/cis-542-week-1-discussion-question/

Web Application Security"
Web application developers have to be mindful of security vulnerabilities when they develop their Web applications (e.g., online banking).

Select a Web-based attack, summarize the type of attack, and provide a recent example in the news (within the last three years) of an attack like this having occurred. What best practices would you follow to prevent this type of attack? Are there any Internet resources that you could recommend that would help developers with best coding practices? Share these resources with your classmates and provide links to any useful resources you find.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

Web Application Security"
Web application developers have to be mindful of security vulnerabilities when they develop their Web applications (e.g., online banking).

Select a Web-based attack, summarize the type of attack, and provide a recent example in the news (within the last three years) of an attack like this having occurred. What best practices would you follow to prevent this type of attack? Are there any Internet resources that you could recommend that would help developers with best coding practices? Share these resources with your classmates and provide links to any useful resources you find.
After reading a few of your classmates’ postings, reply to the ones from which you learned something new or to which you have something to add. Remember to get in early and post often.

CIS 542 WEEK 1 DISCUSSION Question

CIS 502 Week 10 Discussion Question

Service Level Agreements
Cloud-based assets include any resources accessed via the cloud. Storing data in the cloud increases risks so additional steps may be necessary to protect the data, depending on its value. When leasing cloud-base services, you must understand who is responsible for maintenance and security. The cloud service provider provides the least amount of maintenance and security. List the three primary cloud-based service models and identify the level of maintenance provided by the cloud service provider in each of the models. Pick one of the models and provide an example of items to include in a service level agreement with the vendor. What would you advise your company to write into the SLA to protect your assets from a legal perspective? What are some examples of security you wouldn’t farm out? Why?

https://hwacer.com/Tutorial/cis-502-week-10-discussion-question/

Service Level Agreements
Cloud-based assets include any resources accessed via the cloud. Storing data in the cloud increases risks so additional steps may be necessary to protect the data, depending on its value. When leasing cloud-base services, you must understand who is responsible for maintenance and security. The cloud service provider provides the least amount of maintenance and security. List the three primary cloud-based service models and identify the level of maintenance provided by the cloud service provider in each of the models. Pick one of the models and provide an example of items to include in a service level agreement with the vendor. What would you advise your company to write into the SLA to protect your assets from a legal perspective? What are some examples of security you wouldn’t farm out? Why?

Service Level Agreements
Cloud-based assets include any resources accessed via the cloud. Storing data in the cloud increases risks so additional steps may be necessary to protect the data, depending on its value. When leasing cloud-base services, you must understand who is responsible for maintenance and security. The cloud service provider provides the least amount of maintenance and security. List the three primary cloud-based service models and identify the level of maintenance provided by the cloud service provider in each of the models. Pick one of the models and provide an example of items to include in a service level agreement with the vendor. What would you advise your company to write into the SLA to protect your assets from a legal perspective? What are some examples of security you wouldn’t farm out? Why?

CIS 502 Week 10 Discussion Question

CIS 502 Week 9 Discussion Question

Disaster Recovery
Disaster recovery has been the topic of study this week. What do you think is the most difficult and expensive disaster to plan for? Do you think companies plan adequately? In your experience (or research if you have no experience) what aspect is most lacking in corporate planning? Why do you think this is? What would you do to advise leadership in your company to prepare for a disaster? Be specific and explain your thought processes on this subject based on your learning.

Disaster Recovery
Disaster recovery has been the topic of study this week. What do you think is the most difficult and expensive disaster to plan for? Do you think companies plan adequately? In your experience (or research if you have no experience) what aspect is most lacking in corporate planning? Why do you think this is? What would you do to advise leadership in your company to prepare for a disaster? Be specific and explain your thought processes on this subject based on your learning.

https://hwacer.com/Tutorial/cis-502-week-9-discussion-question/

Disaster Recovery
Disaster recovery has been the topic of study this week. What do you think is the most difficult and expensive disaster to plan for? Do you think companies plan adequately? In your experience (or research if you have no experience) what aspect is most lacking in corporate planning? Why do you think this is? What would you do to advise leadership in your company to prepare for a disaster? Be specific and explain your thought processes on this subject based on your learning.

Disaster Recovery
Disaster recovery has been the topic of study this week. What do you think is the most difficult and expensive disaster to plan for? Do you think companies plan adequately? In your experience (or research if you have no experience) what aspect is most lacking in corporate planning? Why do you think this is? What would you do to advise leadership in your company to prepare for a disaster? Be specific and explain your thought processes on this subject based on your learning.

CIS 502 Week 9 Discussion Question

CIS 502 Week 8 Discussion Question

Detective and Preventative Measures
Ideally, an organization can avoid incidents completely by implementing preventive countermeasures. When an incident does occur, an organization will want to detect it as soon as possible. Intrusion detection and prevention systems are some of the ways that organizations detect incidents. Security professionals need to understand common attack methods so that they can take proactive steps to prevent them. Select a common attack, describe the attack and how organizations attempt to prevent the attack from happening, and explain how they detect and respond to the attack. Research current news for attacks for the example you have provided.

https://hwacer.com/Tutorial/cis-502-week-8-discussion-question/

Detective and Preventative Measures
Ideally, an organization can avoid incidents completely by implementing preventive countermeasures. When an incident does occur, an organization will want to detect it as soon as possible. Intrusion detection and prevention systems are some of the ways that organizations detect incidents. Security professionals need to understand common attack methods so that they can take proactive steps to prevent them. Select a common attack, describe the attack and how organizations attempt to prevent the attack from happening, and explain how they detect and respond to the attack. Research current news for attacks for the example you have provided.

Detective and Preventative Measures
Ideally, an organization can avoid incidents completely by implementing preventive countermeasures. When an incident does occur, an organization will want to detect it as soon as possible. Intrusion detection and prevention systems are some of the ways that organizations detect incidents. Security professionals need to understand common attack methods so that they can take proactive steps to prevent them. Select a common attack, describe the attack and how organizations attempt to prevent the attack from happening, and explain how they detect and respond to the attack. Research current news for attacks for the example you have provided.

Detective and Preventative Measures
Ideally, an organization can avoid incidents completely by implementing preventive countermeasures. When an incident does occur, an organization will want to detect it as soon as possible. Intrusion detection and prevention systems are some of the ways that organizations detect incidents. Security professionals need to understand common attack methods so that they can take proactive steps to prevent them. Select a common attack, describe the attack and how organizations attempt to prevent the attack from happening, and explain how they detect and respond to the attack. Research current news for attacks for the example you have provided.

CIS 502 Week 8 Discussion Question

CIS 502 Week 7 Discussion Question

Access Control Models
If you were going to design an access system that would control people getting into your favorite or most valued items (e.g., financial records, health records, or other sensitive files), what things would you consider based on your readings from Chapter 14? Make sure you address all the possible avenues of attack that could be exploited. Remember, security measures are designed to slow and draw attention to attackers. No system can completely prevent a successful attack.

https://hwacer.com/Tutorial/cis-502-week-7-discussion-question/

Access Control Models
If you were going to design an access system that would control people getting into your favorite or most valued items (e.g., financial records, health records, or other sensitive files), what things would you consider based on your readings from Chapter 14? Make sure you address all the possible avenues of attack that could be exploited. Remember, security measures are designed to slow and draw attention to attackers. No system can completely prevent a successful attack.

Access Control Models
If you were going to design an access system that would control people getting into your favorite or most valued items (e.g., financial records, health records, or other sensitive files), what things would you consider based on your readings from Chapter 14? Make sure you address all the possible avenues of attack that could be exploited. Remember, security measures are designed to slow and draw attention to attackers. No system can completely prevent a successful attack.

Access Control Models
If you were going to design an access system that would control people getting into your favorite or most valued items (e.g., financial records, health records, or other sensitive files), what things would you consider based on your readings from Chapter 14? Make sure you address all the possible avenues of attack that could be exploited. Remember, security measures are designed to slow and draw attention to attackers. No system can completely prevent a successful attack.

CIS 502 Week 7 Discussion Question

CIS 502 Week 6 Discussion Question

Authentication Factors
The three primary factors of authentication are something you know, something you have, and something you are. Multifactor authentication uses more than one authentication factor and is stronger than using a single authentication factor. You are the security professional assigned to design the authentication process for your company. The goal is to secure very sensitive customer data. Thinking about what you know about factors of authentication, provide an example of the process you would implement for users to authenticate to the company’s intranet. How might employee access differ from customer access? Be sure to fully explain your reasoning.

https://hwacer.com/Tutorial/cis-502-week-6-discussion-question/

Authentication Factors
The three primary factors of authentication are something you know, something you have, and something you are. Multifactor authentication uses more than one authentication factor and is stronger than using a single authentication factor. You are the security professional assigned to design the authentication process for your company. The goal is to secure very sensitive customer data. Thinking about what you know about factors of authentication, provide an example of the process you would implement for users to authenticate to the company’s intranet. How might employee access differ from customer access? Be sure to fully explain your reasoning.

Authentication Factors
The three primary factors of authentication are something you know, something you have, and something you are. Multifactor authentication uses more than one authentication factor and is stronger than using a single authentication factor. You are the security professional assigned to design the authentication process for your company. The goal is to secure very sensitive customer data. Thinking about what you know about factors of authentication, provide an example of the process you would implement for users to authenticate to the company’s intranet. How might employee access differ from customer access? Be sure to fully explain your reasoning.

CIS 502 Week 6 Discussion Question

CIS 502 Week 5 Discussion Question

OSI Model: Understanding the Seven Layers of Computer Networks
Understanding the function and responsibilities of each layer of the OSI model will help you to understand how network communications function. To make the most of the OSI model, you must be able to remember the name of the seven layers in their proper order.
Let’s have some fun and think about mnemonics from the initial letters of the layer names so they are easier to remember. You may work from the physical layer to the application layer or the reverse.
For example: Physical – Data link – Network – Transport – Session – Presentation - Application
Please ----Do -----------Not ---------Throw -------Sausage--Pizza -----------Away.

https://hwacer.com/Tutorial/cis-502-week-5-discussion-question/

Think of an original mnemonic for the OSI model and post with your discussion post.
Next, select one of the layers and: (1) discuss a function of the layer and (2) provide an example of a common networking component for the layer.
For example: Layer 2 is the data link layer and allows a device to access the network to send and receive messages. A common network component for this layer is a network interface card (NIC).

There are many functions and components to select from, so please do not replicate selections already chosen by your peers.

OSI Model: Understanding the Seven Layers of Computer Networks
Understanding the function and responsibilities of each layer of the OSI model will help you to understand how network communications function. To make the most of the OSI model, you must be able to remember the name of the seven layers in their proper order.
Let’s have some fun and think about mnemonics from the initial letters of the layer names so they are easier to remember. You may work from the physical layer to the application layer or the reverse.
For example: Physical – Data link – Network – Transport – Session – Presentation - Application
Please ----Do -----------Not ---------Throw -------Sausage--Pizza -----------Away.

Think of an original mnemonic for the OSI model and post with your discussion post.
Next, select one of the layers and: (1) discuss a function of the layer and (2) provide an example of a common networking component for the layer.
For example: Layer 2 is the data link layer and allows a device to access the network to send and receive messages. A common network component for this layer is a network interface card (NIC).

There are many functions and components to select from, so please do not replicate selections already chosen by your peers.

CIS 502 Week 5 Discussion Question

CIS 502 Week 3 Assignment 1

Assignment 1: Business Continuity Plan Report
Due Week 3 and worth 50 points

During your first week as a Senior Information Systems Security director, you met with the Chief Information Officer (CIO) and Chief Security Officer (CSO). During the meeting, they revealed their deep concerns with the organization’s business continuity plans (BCP). Since you were previously responsible for BCPs for a large enterprise they are requesting that you review the company’s BCP staffing plans and training plans.

They would like you to provide a report with your findings and recommendations for corrective action.

Additionally, include why it is important to include legal representatives on the business continuity planning team and provide an example of laws or regulation the company should include to remain compliant.

https://hwacer.com/Tutorial/cis-502-week-3-assignment-1/

While there is not a specific page requirement for this assignment, students are required to fully develop ideas and answer questions to the point that no further questions are left in the mind of the reader. If the instructor can clearly find the answers to their questions, the ideas within the report are fully developed. If there are unanswered or under-answered questions, further development of the report is required. 
Keep the following in mind:

More words do not necessarily indicate more meaning.
When an employee is tasked with a project in the workplace that requires a report, the report should fully answer all the questions needing to be answered. In this school environment, students are learning how to prepare such documents.
Consider your audience. Although instructors are very knowledgeable on the subject matter, they need to verify that the student has absorbed the material through a written report. Students should therefore write to an audience of a co-worker or classmate who does not know the answers to the questions posed.
For students who are more comfortable with more specific guidelines, ideas can generally be developed in one to three paragraphs. The goal of writing in this class is to demonstrate what you have learned.

CIS 502 Week 3 Assignment 1

CIS 502 Week 3 Discussion Question

Cryptography Keys
Cryptography provides confidentiality, integrity authentication, and nonrepudiation for sensitive information while it is stored (at rest), traveling across a network (in transit), and existing in memory (in use). Cryptography keys play in the world of data security and are an extremely important security technology embedded in many of the security controls used to protect information from unauthorized visibility and use.
Let’s say you work for one of the following types of industry:

Manufacturing
Government
Research
Service
Consulting

After you choose one of the above, consider the three types of algorithms commonly used today. Which do you find to be the most secure? Which is the most complex? Which did you struggle to understand? What do you think you need to know as a manager in order to choose the right security systems for your company? Be sure to fully develop your responses and support your opinion with reasons from your study this week.

https://hwacer.com/Tutorial/cis-502-week-3-discussion-question/

Cryptography Keys
Cryptography provides confidentiality, integrity authentication, and nonrepudiation for sensitive information while it is stored (at rest), traveling across a network (in transit), and existing in memory (in use). Cryptography keys play in the world of data security and are an extremely important security technology embedded in many of the security controls used to protect information from unauthorized visibility and use.
Let’s say you work for one of the following types of industry:

Manufacturing
Government
Research
Service
Consulting

After you choose one of the above, consider the three types of algorithms commonly used today. Which do you find to be the most secure? Which is the most complex? Which did you struggle to understand? What do you think you need to know as a manager in order to choose the right security systems for your company? Be sure to fully develop your responses and support your opinion with reasons from your study this week.

Cryptography Keys
Cryptography provides confidentiality, integrity authentication, and nonrepudiation for sensitive information while it is stored (at rest), traveling across a network (in transit), and existing in memory (in use). Cryptography keys play in the world of data security and are an extremely important security technology embedded in many of the security controls used to protect information from unauthorized visibility and use.
Let’s say you work for one of the following types of industry:

Manufacturing
Government
Research
Service
Consulting

CIS 502 Week 3 Discussion Question

CIS 502 Week 1 Discussion Question

As a manager, you’re going to be responsible for security planning. Humans are the weakest link in the armor of security. Security measures must be balanced with a businesses’ ability to function. Based upon the CIA Triad, what factors will you consider when coming up with your security plan? How will they affect the balance between securing the systems, and allowing the business enough breathing room to function effectively?

As a manager, you’re going to be responsible for security planning. Humans are the weakest link in the armor of security. Security measures must be balanced with a businesses’ ability to function. Based upon the CIA Triad, what factors will you consider when coming up with your security plan? How will they affect the balance between securing the systems, and allowing the business enough breathing room to function effectively?

https://hwacer.com/Tutorial/cis-502-week-1-discussion-question/

As a manager, you’re going to be responsible for security planning. Humans are the weakest link in the armor of security. Security measures must be balanced with a businesses’ ability to function. Based upon the CIA Triad, what factors will you consider when coming up with your security plan? How will they affect the balance between securing the systems, and allowing the business enough breathing room to function effectively?

As a manager, you’re going to be responsible for security planning. Humans are the weakest link in the armor of security. Security measures must be balanced with a businesses’ ability to function. Based upon the CIA Triad, what factors will you consider when coming up with your security plan? How will they affect the balance between securing the systems, and allowing the business enough breathing room to function effectively?

As a manager, you’re going to be responsible for security planning. Humans are the weakest link in the armor of security. Security measures must be balanced with a businesses’ ability to function. Based upon the CIA Triad, what factors will you consider when coming up with your security plan? How will they affect the balance between securing the systems, and allowing the business enough breathing room to function effectively?

CIS 502 Week 1 Discussion Question

Monday 22 April 2019

Cis 505 Week 4 Discussion Question

Choose a couple of ways how your life would be different without the Internet. How would the business world be different? Think of the job you have now, a job you’ve had previously, or the job you’d really like to have and discuss what you think the impact would be based on your understanding of equipment used to support Internet access such as switches and routers.

Choose a couple of ways how your life would be different without the Internet. How would the business world be different? Think of the job you have now, a job you’ve had previously, or the job you’d really like to have and discuss what you think the impact would be based on your understanding of equipment used to support Internet access such as switches and routers.

https://hwacer.com/Tutorial/cis-505-week-4-discussion-question/

Choose a couple of ways how your life would be different without the Internet. How would the business world be different? Think of the job you have now, a job you’ve had previously, or the job you’d really like to have and discuss what you think the impact would be based on your understanding of equipment used to support Internet access such as switches and routers.

Choose a couple of ways how your life would be different without the Internet. How would the business world be different? Think of the job you have now, a job you’ve had previously, or the job you’d really like to have and discuss what you think the impact would be based on your understanding of equipment used to support Internet access such as switches and routers.

Choose a couple of ways how your life would be different without the Internet. How would the business world be different? Think of the job you have now, a job you’ve had previously, or the job you’d really like to have and discuss what you think the impact would be based on your understanding of equipment used to support Internet access such as switches and routers.

Cis 505 Week 4 Discussion Question Choose a couple of ways how your life would be different without the Internet. How would the business world be differen

CIS 505 Week 7 Case Study 1

CIS 505 Week 7 Case Study 1
Case Study 1: Carlson Companies
Due Week 7 and worth 140 points

Read the case study titled, "Carlson Companies" found at the end of Chapter 12 and also linked here as a PDF.

https://hwacer.com/Tutorial/cis-505-week-7-case-study-1/

Write a fully developed paper in which you:

Assess how the Carlson SAN approach would be implemented in today’s environment.
Compare the pros and cons of consolidating data on a SAN central data facility versus the dispersed arrangement it replaces.
Evaluate the issues raised from the Carlson SAN mixing equipment from a number of vendors and determine the management options for dealing with this type of situation.
Justify the reduction of administration and management of storage networking through Carlson’s IP SAN.
Assess how cloud computing could be used by Carlson instead of a SAN. Create a diagram using Visio or its open source alternative software to illustrate the use of cloud computing. Note: The graphically depicted solution is not included in the required page length.
Use at least three quality resources in this assignment. Note: Wikipedia and similar websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

Be typed, double-spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

Case Study 1: Carlson Companies
Due Week 7 and worth 140 points

Case Study 1: Carlson Companies
Due Week 7 and worth 140 points

Case Study 1: Carlson Companies
Case Study 1: Carlson Companies
Case Study 1: Carlson Companies

CIS 505 Week 3 Assignment 2

Assignment 2: Wireless Technology
Due Week 3 and worth 140 points

There are a number of cellular phone companies each serving their own unique geographical areas. Likewise, they each may use a different technology to transfer communication. Research the pros and cons of 3G and 4G technologies and its role in today’s applications.

Write a fully developed paper in which you:

Compare the pros and cons of 3G and 4G technology to determine the best uses of 3G and 4G technology in today’s applications.
Describe how an enterprise would use 3G, 4G, WWAN, and WiAMX to improve business. Explain why they would use one solution over the remaining three (3).
Analyze the changes in 4G technology since the printing of the textbook in 2009 and identify those of importance for a user of 4G technology.
Take a position on the following statement, “Wireless application protocol is a necessity for wireless communication organizations and their users.” Then, explain your position with supporting evidence.
Use at least three quality resources in this assignment. Note:Wikipedia and similar websites do not qualify as quality resources.

https://hwacer.com/Tutorial/cis-505-week-3-assignment-2/

Your assignment must follow these formatting requirements:

Be typed, double-spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

Compare the pros and cons of 3G and 4G technology to determine the best uses of 3G and 4G technology in today’s applications.
Describe how an enterprise would use 3G, 4G, WWAN, and WiAMX to improve business. Explain why they would use one solution over the remaining three (3).
Analyze the changes in 4G technology since the printing of the textbook in 2009 and identify those of importance for a user of 4G technology.
Take a position on the following statement, “Wireless application protocol is a necessity for wireless communication organizations and their users.” Then, explain your position with supporting evidence.
Use at least three quality resources in this assignment. Note:Wikipedia and similar websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

Be typed, double-spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

Wednesday 17 April 2019

ACC 317 WEEK 2 DISCUSSION Question

"Financial Accounting Income vs. Taxable Income"

Your new client, Barbara, has just formed a new corporation that provides consulting services to couples contemplating marriage. She has learned from her accountant that there will be items in her business that cause her financial accounting income to be different than her taxable income. Barbara wants to know what these income and expense items are and how she will compute her corporation’s taxable income. She also needs guidance on when her corporation will need to file taxes and make estimated payments, if needed.

https://hwacer.com/Tutorial/acc-317-week-2-discussion-question/

"Financial Accounting Income vs. Taxable Income"

Your new client, Barbara, has just formed a new corporation that provides consulting services to couples contemplating marriage. She has learned from her accountant that there will be items in her business that cause her financial accounting income to be different than her taxable income. Barbara wants to know what these income and expense items are and how she will compute her corporation’s taxable income. She also needs guidance on when her corporation will need to file taxes and make estimated payments, if needed.

"Financial Accounting Income vs. Taxable Income"

Your new client, Barbara, has just formed a new corporation that provides consulting services to couples contemplating marriage. She has learned from her accountant that there will be items in her business that cause her financial accounting income to be different than her taxable income. Barbara wants to know what these income and expense items are and how she will compute her corporation’s taxable income. She also needs guidance on when her corporation will need to file taxes and make estimated payments, if needed.

"Financial Accounting Income vs. Taxable Income"

Your new client, Barbara, has just formed a new corporation that provides consulting services to couples contemplating marriage. She has learned from her accountant that there will be items in her business that cause her financial accounting income to be different than her taxable income. Barbara wants to know what these income and expense items are and how she will compute her corporation’s taxable income. She also needs guidance on when her corporation will need to file taxes and make estimated payments, if needed.

ACC 317 WEEK 2 DISCUSSION Question "Financial Accounting Income vs. Taxable Income" Your new client, Barbara, has just formed a new corporation that provide

ACC 317 WEEK 1 DISCUSSION Question

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

https://hwacer.com/Tutorial/acc-317-week-1-discussion-question/

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

"Legal Entities"

Our reading this week covers the different types of legal entities. Please chose a legal entity type and discuss the entity’s tax and non-tax characteristics. Then, describe a situation in which a taxpayer would choose this type of entity by providing an example.

ACC 317 WEEK 11 DISCUSSION Question

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

https://hwacer.com/Tutorial/acc-317-week-11-discussion-question/

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?
"Course Wrap-Up"
- Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?

"Course Wrap-Up"

Identify at least (2) concepts that were reviewed in this course that were the most beneficial to you. How do you think these concepts will help you in your current job or future career/endeavors?