You are the information security manager (ISM) of a financial and savings organization (NCU Financial Savings Bank, or NCU-FSB) with a clientele base of 250,000 customers averaging 1.2 million transactions per week. The IT infrastructure consists of 10 servers for each of the three locations: five for local production and five for replication and redundancy. After a recent vulnerability assessment performed by an external firm, specific threats and vulnerabilities were identified and needed to be addressed. The conceptual network diagram for NCU-FSB is displayed in Figure 3 (attached file)
The following findings were reported:
– MAC address conflicts that need to be resolved between telecommunications and network appliances (routers, switches, firewalls, servers, etc…)
– Security warnings coming from the proxy and email servers
– Constant firewall alerts classified as high
– Employee collusion in certain processes that can result in a significant financial loss to the organization
– Inconsistencies in data transmissions
– Attacks detected from external international sources caused by multiple critical servers that have been compromised due to vulnerabilities in the operating system, where the presence of additional services, opened ports, additional dynamic link libraries (DLLs), additional files and scripts added to the system partitions, and critical data missing from the server issues were detected
As the newly hired ISM of the organization, you have been tasked by the board of directors to analyze and layout a strategy to address risk issues and what aspects or areas should be considered when performing a security risk assessment. One of the first observations is the lack of segregation of duties (SOD) to reduce any collusion, but you recognize this could lead to an increase in the number of employees within your team. Budgetary constraints are against the addition of employees in your department.
For this assignment, you must write an article presenting the results of your analysis and initial data discovery (eDiscovery) in which you briefly answer the following questions:
– An introduction that addresses the essence of a security risk assessment. In this introduction, you will explain and defend the importance of having a risk management program in place, the main elements of a risk program, and the benefits derived from incorporating this strategy as part of the corporate security program.
– What solutions can you employ to reduce or even eliminate the possibility of collusion in the financial organization?
– How would you address the need to segregate duties (SOD) and rotate tasks, for it is a requirement by laws applicable to financial and savings institutions like Sarbanes Oxley (SOX) and Gramm Leach Bliley Act (GLBA)?
– What actions or changes in server setting and configuration must be made to avoid MAC address collision and server compromise?
– Discussion of the primary threats enterprises are currently facing, the impact, and a comprehensive analysis of how security must address these threats, attacks, and vulnerabilities.
– Different regulatory requirements that warrant a security risk analysis.
– Taxonomy of risk elements for cyber-risk management as part of the security risk analysis. Define the concept of taxonomy and its importance as part of the risk assessment and management process. Develop a table and relation diagram.
– Information needed to initiate a security risk analysis—eDiscovery process flowchart and explanation.
Length: 4-5 pages with a minimum of 3 scholarly references (within 5 years)
Resources:
– Grobler, J. (2018). Cyber risk from a chief risk officer perspective. Journal of Risk Management in Financial Institutions, 11(2), 125-131.
– Elnagy, S.A., Qiu, M., & Gai, K. (2016). Understanding taxonomy of cyber risks for cybersecurity insurance of financial industry in cloud computing…
– Knight, M. (2017). What is taxonomy? Dataversity.
– Tokunaga, R.S. (2017). Cyber-defense: A taxonomy of tactics for managing cyberstalking. Journal of Interpersonal Violence. 32(10), 1451-1475.
Try it now!
How it works?
Follow these simple steps to get your paper done
Place your order
Fill in the order form and provide all details of your assignment.
Proceed with the payment
Choose the payment system that suits you most.
Receive the final file
Once your paper is ready, we will email it to you.
Our Services
Custom Writings Help is a Quality-Oriented Company in Online Writing as a result of hiring exceptional professionals to execute clients' tasks.
Essays
At Custom Writings Help,We understand the struggle of research paper writing, and that is why at Custom WritingS Help, we are all out to help you. We pride ourselves on having a team of clinical writers. The stringent and rigorous vetting process ensures that only the 'BEST' Writers are chosen for the job. We have highly qualified Ph.D. and MA writers working with us; we equally offer these experienced writers specific bonuses and incentives to make them deliver highly original, unique, and informative content at reasonably low prices.
Admissions
Thesis Writing Service
Worlwide, Many Masters Students are struggling with Thesis Completion. A thesis is likely to be the longest and most challenging piece of work a student has ever completed. However, unlike essays and other assignments, a student can pick a particular interest topic and work on their initiative. Fortunately, we are there for you. At Custom Writings Help, you are assured of an authentic, imaginative, informative, linguistically great, and advantageous thesis that adheres to all your needs. So, why continue considering different writers when you have discovered the best in the field?
Editing
Custom Papers
Not a single student can avoid writing custom papers. However, a total lack of experience, skills, and time makes it very hard to produce a superb writing piece. Therefore, if you are seeking professional help, turn to us. Our specialized and experienced writers compose a variety of model papers, including custom essays, college term papers, research papers, book reports, MBA essays, executive summaries, dissertations, Ph.D. theses, admission essays, and research proposals for college and university students at any level.
Coursework
Essay Writing
Most of the students disregard the critical principles of essay writing and compose papers below sensible guidelines. Therefore, with Custom Writings Help, one should not worry about his/her essay. Our Writers compose informative and engaging content on all complexities and topics. We write meaningful and smart essays while prioritizing all aspects that bring about a good grade, such as impeccable grammar, proper structure, zero-plagiarism, and conformance to guidelines.
Coursework
Coourse Work Writing
Don't let the seemingly never-ending onslaught of writing assignments get you down. If you are looking where to get course work assistance online, the writers at Custom Writings Help are here to assist you with all of your writing needs. We undertake to unique delivery of papers that meet the professor's requirements. The content is proofread, edited, and checked plagiarism before submission to customers. No matter how big or small your work is, we will deliver on time. Try US Now! !
Coursework
Dissertation Writing Service
High-Quality Dissertation Writing Services are rare. They require Ph.D. academicians – not easily found. However, are an exception. The years, time, and resources we have invested in the dissertation world has given us a competitive advantage over others. Choose to come to Custom Writings Help; You will find perfect Ph.D. consultants who have written hundreds of dissertations theses ready to help you. Let our dissertation-writing services help you craft your dissertation, for you are assured we will give you the results.