Discussions

Computer Forensics Discussions

Discussion 1

"Incident Response Team" Please respond to the following:

· Imagine you work for a medium-sized business in the information security department and suppose you’ve determined the need to structure and implement an incident response plan and team. Propose how you would make a business case for the management team, explaining why this is a needed component of the security program at the company.

· Determine how you would design the incident response team, knowing that you would use six (6) people from your current staff to comprise the team. Identify the role that each of these individuals would take and briefly discuss the tasks each would need to absorb.

Discussion2

"Technology Legislation" Please respond to the following:

· Select a law that currently governs how technology can be used and discuss it in detail utilizing your own words. Determine whether or not you believe this legislation and other laws surrounding technology are keeping up with the changes and fast paced advancement of information technology and crime. Provide a rationale for your response.

· Go to the CERIAS website to read the study titled “Cyber Forensics: The Need for an Official Governing Body,” located at  https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/2015-4.pdf . Determine whether or not you agree with the authors on the identified numerous issues within the digital forensics community and if more government regulation is needed in this arena. Additionally, suppose you were asked to propose how a governing body could be organized to assist in these issues and indicate what your structure might be.

Computer Security Discussion

Discussion 1

"Internal Controls"  Please respond to the following:

· Discuss internal controls in small, medium, and large companies and suggest five options for implementing the internal controls in each environment.

Cyber Security Discussions

Discussion 1

"Meeting Compliance Requirements" Please respond to the following:

· Propose three factors that should be considered when designing policies for legal and regulatory compliance. Determine how each factor would minimize liability for the organization.

· Outline the steps required in order to define what is needed to meet compliance requirements. Determine the most important step in this process and support your answer with a rationale.

Discussion 2

"Developing Risk Management Best Practices" Please respond to the following:

· Analyze a well-designed risk management plan to determine how it can prevent risk and control residual risk. Identify what you believe to be the most important step in the risk management process and explain why. 

· Construct two examples that demonstrate how qualitative and quantitative methods could be applied to measure risk and prioritize risk responses. Recommend two factors that should be considered when prioritizing risk responses.