Discussion Question : Legal Regulations, Compliance and Investigation

bablu0603
ExecutiveSummaryonRiskAnalysisWeek1.docx

University of The Cumberlands

Fall - 2017

Assignment: Executive Summary on Risk Analysis

In partial fulfillment of the requirements for

Legal Regulations, Compliance and Investigation

Submitted to

Mr. Brian Strunk

By

Snehith Deshpande

Student ID: 002826629, Email: sdeshpande6629@ucumberlands.edu

Date: 10-22-2017

Premier Collegiate School, a private school, has total strength of 300 students and 30 faculties. We can clearly observe that 2 servers are functioning within the school premises i.e. one for the administrative activities and other for student’s needs. In this, 35 desktops are shared by students as well as the faculties whereas 1 laptop is allotted for the principal. Only enrolled students are required to provide privately owned laptops for their school work. Hence, an asset list is required so that priorities can be listed on this based on their importance to the function of the school and the level of protection required for each and every asset. So, asset list for Premier Collegiate School is:

IT asset Description

IT Infrastructure Domain

Privacy Data Impact

Assessment ( Critical-Major-Minor)

Quantitative Value ($)

Administration Server

LAN Domain

Accesses Customer Privacy Data

Critical

$3500

Student Server

LAN Domain

Accesses Customer Privacy Data

Critical

$3500

Storage

System Application Domain

Contains Customer Privacy Data

Critical

$2000

Wireless Access

WAN Domain

Accesses Customer Privacy Data

Major

$1500

Student Application

System Application Domain

Contains Customer Privacy Data

Major

$1200

Administrative Computers

LAN to WAN Domain

Accesses Customer Privacy Data

Minor

$1000

Staff Computers

LAN to WAN Domain

Accesses Customer Privacy Data

Minor

$1000

Principal Laptop

Remote Access Domain

Accesses Customer Privacy Data

Minor

$350

Computer Lab

Workstation Domain

Accesses Customer Privacy Data

Major

$10000