CIS 502 Week 7 Discussion

CIS 502 Week 7 Discussion,

"Security Policies and Procedures and Big Data"  Please respond to the following:

• From the first e-Activity, analyze the chosen organization’s security policies and procedures, and provide an opinion of whether or not its policies and procedures are strong from an information security standpoint. Justify your opinion utilizing specific examples from your research.

http://hwacer.com/Tutorial/cis-502-week-7-discussion/

• From the second e-Activity, determine what you believe to be the top two (2) security concerns related to big data, and give your opinion of what you believe are appropriate solutions to those problems, if solutions do exist. Justify your response.

CIS 502 Week 7 Discussion

CIS 502 Week 6 Discussion

"Incident Response and Compliances"  Please respond to the following:

• From the first e-Activity, determine whether or not you believe that legislation and regulations have had the intended impact on the legal and ethical issues inherent in information security.

http://hwacer.com/Tutorial/cis-502-week-6-discussion/

• From the second e-Activity, discuss the specifics of the incident you researched, and analyze the mitigation and recovery tactics that those impacted utilized. Determine whether or not you would have considered a different course of action than the one taken related to the incident that you researched. Justify your answer.

CIS 502 Week 6 Discussion

CIS 502 Week 6 Assignment 2

Assignment 2: Critical Infrastructure Protection

Due Week 6 and worth 110 points

According to the text, Critical Infrastructure Protection (CIP) is an important cybersecurity initiative that requires careful planning and coordination in protecting our infrastructure.

You may use the following resources in order to complete the assignment,

• “National Infrastructure Protection Plan”, located at http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf
• DHS Critical Infrastructure Security Webpage, located at https://www.dhs.gov/topic/critical-infrastructure-security
• “NIST Framework for Improving Critical Infrastructure Cybersecurity,” located at http://www.nist.gov/cyberframework/upload/cybersecurity-framework-021214-final.pdf
• “NIST Roadmap for Improving Critical Infrastructure Cybersecurity,” located at http://www.nist.gov/cyberframework/upload/roadmap-021214.pdf  

http://hwacer.com/Tutorial/cis-502-week-6-assignment-2/

Write a three to five (3-5) page paper in which you:

1. Interpret the Department of Homeland Security’s mission, operations and responsibilities.
2. Detail the Critical Infrastructure Protection (CIP) initiatives, what they protect, and the methods we use to protect our assets.
3. Analyze the way in which CIP has or has not advanced between the releases of the DHS’ NIPP and the NIST’s Framework for Improving Critical Infrastructure Cybersecurity. Justify your response.
4. Describe the vulnerabilities that should concern IS professionals who protect the U.S.’s critical infrastructure.
5. Suggest three (3) methods to improve the protection of the U.S.’s critical infrastructure, and justify each suggested method.
6. Evaluate the effectiveness of IS professionals in regard to protecting the U.S.’s critical infrastructure, and indicate the strategic ways that you believe IS professionals could better serve as protectors.
7. Use at least three (3) quality resources outside of the suggested resources in this assignment.  Note:Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

• Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.
• Evaluate potential situations of business interruption and the planning necessary to mitigate the threats involved.
• Compare and contrast business continuity and disaster recovery planning.
• Use technology and information resources to research issues in security management.
• Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.
• CIS 502 Week 6 Assignment 2

CIS 502 Week 5 Midterm Exam

CIS 502 Week 5 Midterm Exam,

• Question 1

2 out of 2 points

	The statement, “Information systems should be configured to require strong passwords”, is an example of a/an:

• Question 2

2 out of 2 points

	Annualized loss expectancy is defined as:

• Question 3

2 out of 2 points

	A qualitative risk assessment is used to identify:

• Question 4

2 out of 2 points

	An organization recently underwent an audit of its financial applications. The audit report stated that there were several segregation of duties issues that were related to IT support of the application. What does this mean?

• Question 5

2 out of 2 points

	The statement, “Promote professionalism among information system security practitioners through the provisioning of professional certification and training.” is an example of a/an:

• Question 6

2 out of 2 points

	Exposure factor is defined as:

http://hwacer.com/Tutorial/cis-502-week-5-midterm-exam/

• Question 7

2 out of 2 points

	An employee with a previous criminal history was terminated. The former employee leaked several sensitive documents to the news media. To prevent this, the organization should have:

• Question 8

2 out of 2 points

	An organization employs hundreds of office workers that use computers to perform their tasks. What is the best plan for informing employees about security issues?

• Question 9 

2 out of 2 points

www.Hwacer.com

	A security manager is developing a data classification policy. What elements need to be in the policy?

• Question 10

2 out of 2 points

	An organization wishes to purchase an application, and is undergoing a formal procurement process to evaluate and select a product. What documentation should the organization use to make sure that the application selected has the appropriate security-related characteristics?

• Question 11 

http://hwacer.com/Tutorial/cis-502-week-5-midterm-exam/

2 out of 2 points

	An organization has a strong, management-driven model of security related activities such as policy, risk management, standards, and processes. This model is better known as:

• Question 12

2 out of 2 points

	CIA is known as:

• Question 13

2 out of 2 points

	An organization suffered a virus outbreak when malware was download by an employee in a spam message. This outbreak might not have happened had the organization followed what security principle:

www.Hwacer.com

MORE DETIALS HIDDEN.........................

Latest A+ graded Scored 100/100!

CIS 502 Week 5 Midterm Exam

CIS 502 Week 5 Discussion

CIS 502 Week 5 Discussion

"Cryptography"  Please respond to the following:

• Analyze the overall attributes of symmetric and asymmetric cryptography technologies. Discuss the advantages and disadvantages of each, and speculate upon the main reasons why organizations utilize both technologies today. Give an example of where you would consider using each of these forms of encryption within an organization to support your response.

http://hwacer.com/Tutorial/cis-502-week-5-discussion/

• From the e-Activity, give your opinion of whether cryptography should be a part of every email security strategy or if there are specific characteristics of organizations where such measures are not needed. Justify your answer.Hwacer.com

CIS 502 Week 5 Discussion

CIS 502 Week 4 Discussion,

"Business Continuity Planning and Disaster Recovery Planning"  Please respond to the following:

• Imagine that you are trying to receive funding for select planning projects. Compare and contrast the attributes of business continuity and disaster recovery plans, and suggest the primary ways in which you would explain these differences to your employer’s Board of Directors. Hwacer.com

http://hwacer.com/Tutorial/cis-502-week-4-discussion/

• From the e-Activity, analyze each company’s plans, and provide three (3) examples of the key ways in which the business continuity and disaster recovery plans of the two (2) organizations are alike and three (3) examples of the ways in which they are different.

CIS 502 Week 4 Discussion

CIS 502 Week 3 Discussion

CIS 502 Week 3 Discussion,

"The Security Problem in Software Development Life Cycle (SDLC)"  Please respond to the following:

• From the e-Activity, contemplate the main reasons why you believe the Francophoned attacks were successful, and explore the key factors that made the social engineering aspect of the attacks so complex and so difficult to identify as malicious.

http://hwacer.com/Tutorial/cis-502-week-3-discussion/

• From the e-Activity, based on the complexity of the Francophoned attacks, give your opinion of overall strategies that you believe security professionals could use in order keep up with the sophisticated nature of the attacks that result from the progression and sophistication of technologies.hwacer.com

CIS 502 Week 3 Discussion

CIS 502 Week 2 Discussion

CIS 502 Week 2 Discussion,

"Role-Based Access Controls"  Please respond to the following:

• Consider at least one (1) alternative to role-based access controls, and indicate where you believe this alternative method would help the security of the organization prosper. Perform research as needed and justify your answer.

http://hwacer.com/Tutorial/cis-502-week-2-discussion/

• From the e-Activity, consider role-based access control (RBAC) methods in terms of file-level and database permissions, and formulate what you believe are the main advantages to using these methods in order to achieve ample security.Hwacer.com

CIS 502 Week 2 Discussion