help 10 pages excluding citations

Help 1: Managing Risk

Your company has decided to implement a human resource demographic portal.  Under the system envisioned, employees would be able to use an online internal web page to change various personal information items themselves, such as, address phone, etc.  In addition, the employees would be able to change limited payroll related items, such as 401k deduction percentages or amounts, optional United Way contributions, and the number of federal and state exemptions to be claimed. Along with the portal would be the ability to view, download, and print current and YTD pay information, including the current paycheck and check “stub”.  

Under the current system, employees must go to the HR office to make any changes – there is no online access.

Your company already requires direct deposit for all employees, and under the new system, pay stubs would no longer be printed.  Employees would be able to do this as needed through the portal.

There are many potential risks associated with this project. 

Your task is to Identify as many risks as you can (4 is a minimum, but feel free to identify more risks if you so desire).

Determine the relative likelihood of each risk occurring (low, medium high)

Propose at least one strategy for addressing each risk and describe the strategy in terms of the 4 risk responses (Avoidance, Transference, Mitigation, or Acceptance).

Turn in as much as needed. (Sometimes less is more, sometimes more is more; it’s your call.)

 

Support your strategies as needed with external references, and make sure your answer directly address the potential risks with the human resource demographic portal.

Help 2: Digital Forensics

There are three primary goals with digital forensics:

Collect electronically stored information in a sound, defensible manner,

Analyze the results of the collections, and

Present the findings either in formal legal proceedings or less formally to inform a client.

Electronic evidence can be short-lived and fragile. It needs to be collected in a defensible, methodological manner to preserve it accurately, and to withstand scrutiny in legal proceedings. (chain of custody)

Electronic evidence can be highly probative, both as it appears to users, and behind the scenes. There is a lot of information that a computer user never sees (e.g. metadata, logs, registry entries). This behind-the-scenes evidence may provide a wealth of information about who did what when and where. Forensic analysts are trained to preserve, collect and interpret this kind of evidence.

Some digital files can be recovered, even if a user has tried to delete them.

Locate a famous case where digital forensics played a role and Discuss how digital forensics was critical in cracking the case.

Remember that sometimes, risks are acceptable and can be taken, so long they are identified and a strategy to address the risk is presented.  For example, driving a car is a risky venture, but to address that risk we have driver’s education (mitigation), manufacturing safety standards (mitigation), insurance (transference), and staying at home (avoidance). Driving an older, unsafe vehicle by an unlicensed and uninsured motorist could be considered acceptance.