3 Papers

3_term_papers.docx

Home >Computer Science homework help >3 Papers

Computer Security Paper

Assignment #8 - Due in Week 10

· Term Paper: Your final will consist of a 5-6-page paper for this course. Students will select from a range of topics provided by the instructor. The topics will consist of a broad category within the Information Security field.

· Submit your findings with APA references.

(Check the research topics doc to select topic to write paper on)

Cyber Security Paper

The Rookie Chief Information Security Officer Due Week 10 and worth 200 points This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs

for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer,

Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3)

areas of information security: physical security professional, privacy professional, and procurement professional. Provide

comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum

IT service delivery. The RFP Plan should contain qualifying criteria of potential vendors and the responsibilities of the vendor once

the contract is awarded. As part of the plan, you must: a. Describe at least two (2) perspectives that need to be closely monitored within the contract. b. Give your perspective on at least two (2) methods that could be used to evaluate and develop a qualified trusted supplier list. Part 3: Physical Security Plan 3. Recommend a physical security plan that could be used to protect sensitive areas such as telecom rooms, employee only areas,

and manufacturing facilities in which you: a. Include at least three (3) specific methods. Part 4: Enterprise Information Security Compliance Program 4. Establish an enterprise information security compliance program that addresses the concerns of the board of directors of the

organization in which you: a. Describe specific plans and control objectives that could be adopted to address the known issues. b. Suggest at least three (3) information security policies that could be developed and practiced within the organization for data

security assurance. c. Outline the steps you would take to define the security needs of the organization in terms of duties, staffing, training, and

processes. Part 5: Risk Management Plan 5. Develop a risk management plan in which you: a. Describe at least three (3) possible risk management efforts that could be used to assess threats and unknown issues. b. Determine why defining priorities is an important part of the process when enumerating and having efficient risk control

measures. c. Suggest specific technical and management controls that could be enacted in order to monitor risks accurately. 6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality

resources. Your assignment must follow these formatting requirements:

· Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

· Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

· Include charts or diagrams created in Visio or one of its equivalents such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

The specific course learning outcomes associated with this assignment are:

· Describe and apply the 14 areas of common practice in the Department of Homeland Security (DHS) Essential Body of Knowledge.

· Describe best practices in cybersecurity.

· Describe physical security plans and processes.

· Evaluate the ethical concerns inherent in cybersecurity and how these concerns affect organizational policies.

· Explain legal and regulatory compliance practices.

· Explain risk management plans and policies.

· Describe physical security plans and processes.

· Develop a cybersecurity plan that incorporates the Department of Homeland Security (DHS) Essential Body of Knowledge.

· Identify the strategic management issues in cybersecurity planning and response.

· Explain data security competencies to include turning policy into practice.

· Compare and contrast the functional roles of an organization in the context of cybersecurity.

· Identify and analyze the role of the Chief Information Officer, Information Security Officer, and IT Security Compliance Officer in the context of cybersecurity.

· Use technology and information resources to research issues in cybersecurity.

· Write clearly and concisely about topics associated with cybersecurity using proper writing mechanics and technical style conventions.

Computer Forensics Paper

Investigating Data Theft

Suppose a large aerospace engineering firm has immediately hired you as a consultant to investigate a potential violation of corporate policy and data theft. You have been informed that an employee may have been using corporate email to send confidential corporate information to one or more personal email accounts, which may or may not belong to him. You have been told that this action has been happening each business day for the last 13 days and the employee is unaware of any suspicion. Write an eight to ten (8-10) page paper in which you:

1. Explain, in detail, the initial actions you would take based on the provided information including formal plans to preserve the crime scene(s) and eventual transportation of evidence to a lab.

2. Analyze the physical and logical places where you would look for potential evidence on the suspect's computer(s) and / or network servers.

3. Describe, in detail, how you proceed with the email investigation, including the review of email headers and tracing.

4. Describe the processes that would be utilized in order to recover data that may have been deleted from the suspect's computer(s).

5. Identify the tools you would use to perform your investigation from beginning to end based on the information you have on the incident. Provide a brief overview of each tool, to include:

· A description of the tool.

· How you would use the tool in the investigation.

· How the tool helps the investigation and the evidence you expect it to provide.

· Why you believe the evidence the tool provides is critical to the investigation.

6. Use at least five (5) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

· Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

· Identify the role of computer forensics in responding to crimes and solving business challenges.

· Outline system forensics issues, laws, and skills.

· Examine and explain the evidence life cycle.

· Identify the procurement of evidence in physical and virtualized environments.

· Analyze the impact of sequestration on the evidence-gathering process.

· Develop plans that collect evidence in network and email environments.

· Examine automated digital forensic analysis.

· Use technology and information resources to research issues in computer forensics.

· Write clearly and concisely about computer forensics topics using proper writing mechanics and technical style conventions.