IT Controls DISCUSSION QUESTIONS

MUST BE SUBMITTED BY 9:30PM EASTERN TIME.

Must answer 2/3 questions SEPARATELY

NOT A PAPER JUST LIST QUESTION AND ANSWER UNDERNEATH.

200 words minimum for each answer to a question. 

MUST include at least one trustworthy and scholarly resource in the response and uses correct APA formatting for the citation and reference.

1. IT controls come in a variety of "flavors". Some groups are described as People, Process, and Technology. Other controls (safeguards) are defined by the standard with which they apply (e.g, Prevent, Detect, Deter, Respond). Research and select a control grouping framework then populate the framework with some examples of the actual control. Provide your rational as to why you selected your framework. 
   
   
2. What four (4) IT security controlls do you find the most important? Why? Do you consider anything related to process or policy a "true" safeguard? Why? Why not? 
   
   
3. We know from experience that the insider threat presents the biggest challenge to security professionals. With this area of control being nearly overwhelming... what technologies do you recommend that will help the security team keep a near real-time view of the insider threat? Think automation, behavior detection, and correlation.