Exercise 1: If an organization has three information assets to

 

Exercise 1:  If an organization has three information assets to evaluate for risk management purposes, as shown in the list below, which vulnerability should be evaluated for additional controls first? Which vulnerability should be evaluated last?

  • A CRM-Server that is connected to the Internet. It has two vulnerabilities:
    • susceptibility to hardware failure, with a likelihood of 8, and
    • susceptibility to ransomware attack with a likelihood of 4.

The CRM-Server has been assigned an impact value of 10.  Assume that there are no current controls in place to protect it, and there is a 75 percent certainty of the assumptions and data.

  • An E-commerce server hosts the company Web site and supports customer transactions. It runs a server software that is vulnerable to a buffer overflow attack, with the likelihood of such an attack estimated at 6. The server has been assigned an impact value of 8. Assume that there are no current controls in place to protect the server, and there is a 70 percent certainty of the assumptions and data.
  • A Control-Console to monitor operations in the server room. It has no passwords and is susceptible to unlogged misuse by the operators. Estimates show that the likelihood of misuse is 2. There are no controls in place on this asset, which has an impact value of 5. There is a 90 percent certainty of the assumptions and data.

Exercise 2:  Using the list of threats to InfoSec presented in Chapter 6 identify and describe three instances of each that were not mentioned in the chapter.

Share This Post

Email
WhatsApp
Facebook
Twitter
LinkedIn
Pinterest
Reddit

Order a Similar Paper and get 15% Discount on your First Order

Related Questions

1) Explain the most common business strategies utilized by entrepreneurs

1) Explain the most common business strategies utilized by entrepreneurs presented in class for creating new ventures. How do you think their personal characteristics contribute to this?  2) How is the Five Competitive Forces Model contributed entrepreneurs evaluated in class, analyze the environment in which their businesses compete, has competed,

Need study help The 2020 Presidential election was one for

Need study help  The 2020 Presidential election was one for the history books. President Biden won the office by winning back from Donald Trump certain swing or battleground states that Trump won in 2016. Explain the mathematics of the electoral college. Identify those key swing states. Why did Biden win

As efforts to expand preschool education in this country have

As efforts to expand preschool education in this country have increased, so has interest in looking to other countries to see how they are educating their youngest children. Use the Internet to find information on preschool education in a country of your choosing (and try to pick one that another

Hello, this is an assignment from Legal Aspects for Nursing

   Hello, this is an assignment from Legal Aspects for Nursing choose a topic below and develop it, please do not exceed 300 words. APA style is required 1. Informed consent. 2. Protection of patient privacy and confidentiality. 3. Patient shared decision making. 4. Address advanced care planning. 5. Inadequate

Referring to Chapter 2 Table 2-2 Research Question Format, create

Referring to Chapter 2 Table 2-2 Research Question Format, create 4 research questions (one of each type) related to your nursing clinical practice area and/or role. Choose 1 of the research questions map out the independent and dependent variables, the population, and the testability. Why is this research question of

Find two (2) EBP Articles on Caring for Clients Alzheimer’s/Dementia

  Find two (2) EBP Articles on Caring for Clients Alzheimer’s/Dementia   · Describe and discuss the target population, correlating factors/circumstances, their     needs, and comorbidities    · Describe and discuss culturally competent care or developmental competence     within the target population       · Describe and discuss the impact of the disease process on

lesson plan CPD 3 Competency Title/Statement: CPD 3: Plans and implements, in partnership with families, culturally, individually, and

lesson plan CPD 3 Competency Title/Statement: CPD 3: Plans and implements, in partnership with families, culturally, individually, and developmentally responsive curricular strategies and interaction that nurture infant/toddler development, learning, and mental health, and well-being. Summative Competency Assessment  Time estimate to complete the summative assessment: 6 hours Summative Assessment Type: Written

Evaluate the strategy of Hezbullah since 2006.

What is expected in an essay is a good question, well stated, that allows you to select and focus on two or three main issues of the topic. A good essay has an introduction that tells the reader what the question is and why it is important. The introduction will

You will research and write a thematic literature review on

You will research and write a thematic literature review on the “History of Supply Chain Management.”   Do not “recycle” any work from any previous courses you have taken.  The research paper will be a comprehensive thematic review of the scholarly literature related to the topic “History of Supply Chain

Article Review Guidelines A common misperception in research is that

Article Review Guidelines A common misperception in research is that all published articles have merit, and findings should be taken as truth. The reality is that some articles get published despite poorly designed studies and/or erroneous conclusions. Part of your role as a young scientist-practitioner is to learn how to

For this week’s discussion, you will be required only to submit the initial post. There are no requirements for response posts to your classmates. Use the course learning objectives below to reflect Nursing Assignment Help

For this week’s discussion, you will be required only to submit the initial post.  There are no requirements for response posts to your classmates. Use the course learning objectives below to reflect on what you have learned over the past seven weeks. Examine the evolving issues in the national healthcare

Take the data provided in the file “assignment2.xls” (Excel file).

Take the data provided in the file “assignment2.xls” (Excel file). These data have been collected through a survey. The survey was interested in three concepts, namely:   Customer loyalty: measured with x1, x3, x4 and x11   Customer satisfaction: measured with x2, x8, x9 and x10   Service quality: measured

How did your group view the working of the universe, and did how that

Accurately and effectively communicating ideas, information, arguments, and messages to present material in a historical context. Investigating and evaluating historical information from global, social and ethical perspectives to guide decision making. Instructions: Compose a 1000-word essay citing your sources (which may come from the required course readings, Discussions, and credible

Identify and describe the concept of quality management

In a group of 4 undertake the necessary research and prepare a 20-minute presentation to a group of senior managers at Queen Elizabeth Hospital in Woolwich. Your presentation should address the following questions: TASK 1 – Identify and describe the concept of quality management ASSESSMENT CRITERIA – Knowledge and understanding

Research your issue.Read and analyze the resources about your chosen

Research your issue. Read and analyze the resources about your chosen issue in the the Primary and Secondary Sources for United Nations Briefing PDF document. These resources provide important historical context for current discussions about these issues that you’ll want to discuss in your presentation.  Note: You can do some of your

Assignment Content Select an actual company to use for this

Assignment Content   Select an actual company to use for this project. Note: It will be to your benefit to select a company whose company information is easily accessible. While you will base your plan on the actual company, there may be parts of this assignment that will require you