Module Two Case Study Template
After reviewing the scenario in the Module Two Case Study Activity Guidelines and Rubric document, fill in the table below by completing the following steps for each control recommendation:
| Control Recommendations | Fundamental Security Desi | gn Principle | Security
Objective Alignmen t (CIA) |
Explain your
Choices (1-2 sentences) |
|||
| Automatically lock workstation sessions after a standard period of inactivity. (Completed as an example) | X | C | I chose layering because it adds another layer of protection for the
confidentiality of our data. |
||||
| If possible, close and lock your office door when leaving your computer. | Layering | C | I selected layering because the closure of doors and other entrances to the office adds another layer to
the security of computer and enhances the confidentiality of data. |
||||
| Use technology to make sure that only authorized software executes, and unauthorized software is blocked from executing on assets. | Complete
Mediation |
I | I chose complete mediation because it ensures that every object
executing commands must be checked to establish its authority. This enhances the integrity of data as changes unauthorized changes to data will be prevented. |
||
| Use automated tools to inventory all administrative accounts to ensure that only authorized individuals have elevated privileges. | Least privilege | I | I chose the least privilege because this principle ensures that the elevation of privileges is done based on a need as opposed to the positions of an organization. This principle will enhance the integrity of the data. |
| Use system configuration management tools to automatically reapply configuration settings to systems at regularly scheduled intervals. | Isolation | A | The principle of isolation will ensure that processes run automatically to ensure that data is available at the time it is required. | ||
| Maintain an inventory of all sensitive information stored or transmitted by the organization’s technology systems, including those located on-site or at a remote location. | Simplicity | A | I chose simplicity because the preparation and management of inventory ensure that the users have quick access to the required information stored in the system. | ||
| Use approved whole-disk encryption software to encrypt the hard drive of all mobile devices. | Layering | C | I chose layering
because encryption provides an extra layer of security. The encryption of hard drives makes helps in maintaining the confidentiality of data. |
||
| If USB storage devices are required, software should be used that can configure systems to allow the use of specific devices. | Fail-safe defaults | C | I chose the failsafe principle because it will enable the system to be configured |
| so that it allows only specific devices. | |||||
| Configure systems not to write data to external removable media, if there is no business need for supporting such devices. | Fail-safe | I | I chose fail-safe because it will enable the system to write data only to the external devices that are authorized so that data integrity is not compromised. | ||
| If USB storage devices are required, all data stored on such devices must be encrypted. | Layering | C | I chose layering
because encryption provides an extra security layer to ensure that data remains confidential. |
||
| Protect all information stored on systems through the use of access control lists. These access control lists enforce the principle that only authorized individuals should have access to the information based on approved business need. | Complete mediation | C | I chose complete mediation because the authority of every object that accesses the system should be checked to achieve the confidentiality objective. | ||
| Require multifactor authentication
for all user accounts, on all systems, whether managed on-site or by a third-party provider. |
Separation of privilege | Separation of privilege to ensure that a single condition should not be considered by a system to grant permission to access data. The objective here is to ensure that the data maintain high levels of confidentiality. |
After you have completed the table above, respond to the following short questions:
Dr. Beard needs to understand that the usage of an information system is associated with risks that can be best understood by professionals in the information security field. Therefore, there should be proper guidance to make Dr. Beard understand that privileges assigned to users of an information system should be limited by the policy of an organization.
Given the case of Dr. Beard, the hospital is currently facing a risk of its data-at-rest. As such, the hospital needs to encrypt data such that access to the computer alone cannot guarantee the accessibility to the data stored. The hospital should also implement mechanisms that can help in the deletion of information remotely from its devices.
Try it now!
How it works?
Follow these simple steps to get your paper done
Place your order
Fill in the order form and provide all details of your assignment.
Proceed with the payment
Choose the payment system that suits you most.
Receive the final file
Once your paper is ready, we will email it to you.
Our Services
Custom Writings Help is a Quality-Oriented Company in Online Writing as a result of hiring exceptional professionals to execute clients' tasks.
Essays
At Custom Writings Help,We understand the struggle of research paper writing, and that is why at Custom WritingS Help, we are all out to help you. We pride ourselves on having a team of clinical writers. The stringent and rigorous vetting process ensures that only the 'BEST' Writers are chosen for the job. We have highly qualified Ph.D. and MA writers working with us; we equally offer these experienced writers specific bonuses and incentives to make them deliver highly original, unique, and informative content at reasonably low prices.
Admissions
Thesis Writing Service
Worlwide, Many Masters Students are struggling with Thesis Completion. A thesis is likely to be the longest and most challenging piece of work a student has ever completed. However, unlike essays and other assignments, a student can pick a particular interest topic and work on their initiative. Fortunately, we are there for you. At Custom Writings Help, you are assured of an authentic, imaginative, informative, linguistically great, and advantageous thesis that adheres to all your needs. So, why continue considering different writers when you have discovered the best in the field?
Editing
Custom Papers
Not a single student can avoid writing custom papers. However, a total lack of experience, skills, and time makes it very hard to produce a superb writing piece. Therefore, if you are seeking professional help, turn to us. Our specialized and experienced writers compose a variety of model papers, including custom essays, college term papers, research papers, book reports, MBA essays, executive summaries, dissertations, Ph.D. theses, admission essays, and research proposals for college and university students at any level.
Coursework
Essay Writing
Most of the students disregard the critical principles of essay writing and compose papers below sensible guidelines. Therefore, with Custom Writings Help, one should not worry about his/her essay. Our Writers compose informative and engaging content on all complexities and topics. We write meaningful and smart essays while prioritizing all aspects that bring about a good grade, such as impeccable grammar, proper structure, zero-plagiarism, and conformance to guidelines.
Coursework
Coourse Work Writing
Don't let the seemingly never-ending onslaught of writing assignments get you down. If you are looking where to get course work assistance online, the writers at Custom Writings Help are here to assist you with all of your writing needs. We undertake to unique delivery of papers that meet the professor's requirements. The content is proofread, edited, and checked plagiarism before submission to customers. No matter how big or small your work is, we will deliver on time. Try US Now! !
Coursework
Dissertation Writing Service
High-Quality Dissertation Writing Services are rare. They require Ph.D. academicians – not easily found. However, are an exception. The years, time, and resources we have invested in the dissertation world has given us a competitive advantage over others. Choose to come to Custom Writings Help; You will find perfect Ph.D. consultants who have written hundreds of dissertations theses ready to help you. Let our dissertation-writing services help you craft your dissertation, for you are assured we will give you the results.