IT Security

DQ1: University Security Breach 

The University of Nebraska's data breach affected over 600,000 students in 2012. This was one of the largest data breaches reported for a university campus. Read the following reports about the data breach and then answer the questions below.

• https://www.databreachtoday.com/u-nebraska-breach-affects-650000-a-4809
• https://nebraska.edu/docs/2012-06-08SecurityIncident.pdf
• https://campustechnology.com/Articles/2013/03/21/Higher-Ed-Data-Breaches-at-Near-Record-High-in-2012.aspx

Discuss the ramifications of the event, what might be the vulnerabilities that were exploited, regulatory and compliance issues associated with the event and what, if you were the CISO would be your recommended course/courses of action to ensure this type of incident did not happen in the future.  Please remember to cite your sources.

DQ2: Threat Model Analysis

Please read Microsoft's Threat Model Analysis, http://msdn.microsoft.com/en-us/library/aa561499.aspx.

Now, describe what you learned. How could you use this model to help improve cyber security in an organization? Please discuss in detail.