Project
ChinniKrish
ScenarioOverview2.pptxISOL 533 Information Security and Risk Management
Residency Written Project
Residency Written Project Summary
Choose a Scenario either A, B, or C (Pay attention to each scenarios industry and think of the information security risks unique to that industry)
Conduct a Risk Assessment (Quantitative, Qualitative, or Semi Quantitative, Frame, Scope, Asset Valuation, Tier 1 thru 3, Vulnerability, Current State and security posture (i.e. controls or lack of), Maturity CMMI 0 thru 5 0 Non-existent, 1 Intimal adhoc, 2 Planned, 3, Well Defined, 4 Quantitively Managed, 5 Optimized)
Create a Risk Mitigation Plan (Reduce risk, by mitigation, transfer, avoid, or acceptance)
What laws, treaties or conditions apply? (Compliance)
Perform a BIA (Business Impact Analysis)
Create a BCP (Business Continuity Plan)
Create a DRP (Disaster Recovery Plan)
Create a CIRP (Cyber Incident Response Plan)
Scenario A – Global Trade and Logistics Firm
You are the CIO for a Global Trade and Logistics Company. This company transports goods globally via boat, train, plane and rail. The products include food, pharmaceuticals, and weapons. They have to ensure that the goods arrive safely to each port. While the company has offices in over 200 countries, their three major cities are Seattle, London and Singapore.
Each city has a data center which houses 10 physical servers, over 1000 virtual servers, and hosts their nearly 15,000 employees along with customers and vendors.
Scenario B -
You are the CIO for a Federal Credit Union. It recently merged several state credit unions under one roof. They now are responsible for the checking, savings, credit cards, and mortgage loans for the credit unions they merged with. They have regional centers stationed in Seattle, Los Angeles, and Atlanta.
Each city has a data center which houses 10 physical servers, over 1000 virtual servers, and hosts their nearly 5,000 employees along with customers and vendors.
Scenario C
You are the CIO for a major online store. It specializes in goods for the elderly with things such as clothes, support items, orthopedic appliances, etc. Many medical supply chains rely upon your company to deliver goods their clients. Your company currently specializes in goods for the west coast. You have centers in Seattle, Los Angeles, and Sacramento.
Each city has a data center which houses 10 physical servers, over 1000 virtual servers, and hosts their nearly 7,500 employees along with customers and vendors.
