Due in 24 hours (Application Security)

Assignment 1

Scenario

One of the security improvements for the Always Fresh IT environment is to ensure all workstations and servers run secure applications. The company needs policies that set security requirements for the software. These policies will guide administrators in developing procedures to ensure all client and server software is as secure as possible.

Specifically, you will write two policies to ensure web server software and web browsers are secure. Your policy statements will describe the goals that define a secure application.

Consider the following questions for web server software and web browsers:

1. What functions should this software application provide?

2. What functions should this software application prohibit?

3. What controls are necessary to ensure this applications software operates as intended?

4. What steps are necessary to validate that the software operates as intended?

Tasks

Create two policies—one for web server software and one for web browser clients. Remember, you are writing policies, not procedures. Focus on the high-level tasks, not the individual steps.

Use the following as a guide for both policies:

1. Type of application software

2. Description of functions this software should allow

3. Description of functions this software should prohibit

4. Known vulnerabilities associated with software

5. Controls necessary to ensure compliance with desired functionality

6. Method to assess security control effectiveness

Assignment 1 Submission Requirements

Format: Microsoft Word (or compatible)

Font: Arial, size 12, double-space

Citation Style: APA

Length: At least 2 pages

References: At least 4 credible scholarly references

No Plagiarism

Assignment 2

Scenario

After the recent security breach, Always Fresh decided to form a computer security incident response team (CSIRT). As a security administrator, you have been assigned the responsibility of developing a CSIRT policy that addresses incident evidence collection and handling. The goal is to ensure all evidence collected during investigations is valid and admissible in court.

Consider the following questions for collecting and handling evidence:

1. What are the main concerns when collecting evidence?

2. What precautions are necessary to preserve evidence state?

3. How do you ensure evidence remains in its initial state?

4. What information and procedures are necessary to ensure evidence is admissible in court?

Tasks

Create a policy that ensures all evidence is collected and handled in a secure and efficient manner. Remember, you are writing a policy, not procedures. Focus on the high-level tasks, not the individual steps.

Address the following in your policy:

1. Description of information required for items of evidence

2. Documentation required in addition to item details (personnel, description of circumstances, and so on)

3. Description of measures required to preserve initial evidence integrity

4. Description of measures required to preserve ongoing evidence integrity

5. Controls necessary to maintain evidence integrity in storage

6. Documentation required to demonstrate evidence integrity

Assignment 2 Submission Requirements

Format: Microsoft Word (or compatible)

Font: Arial, size 12, double-space

Citation Style: APA

Length: At least 2 pages

References: At least 4 credible scholarly references

No Plagiarism

Assignment 3

Scenario 1

Microsoft adheres to a defense-in-depth principle to ensure protection of its cloud services, such as Microsoft Office 365. Built-in security features include threat protection to reduce malware infections, phishing attacks, distributed denial of service (DDoS) attacks, and other types of security threats.

Answer the following question(s):

Would an organization need to apply security controls to allow safe use of those applications? Why or why not?

Assignment 3 (Scenario 1) Submission Requirements

Font: Arial, size 12, double-space

Citation Style: APA

Length: At least 250 words

References: At least 2 credible scholarly references

No Plagiarism

Scenario 2

Communication is a key part of a successful incident response plan. Assume you are the CSIRT team lead of a large corporation that just experienced a significant security breach.

Answer the following question(s):

1. Should you inform the chief executive officer (CEO) immediately when the breach is discovered? Why or why not?

2. Should customers be informed immediately? Why or why not?

Assignment 3 (Scenario 2) Submission Requirements

Font: Arial, size 12, double-space

Citation Style: APA

Length: At least 250 words

References: At least 2 credible scholarly references

No Plagiarism