Analyze Cybersecurity Risks

You are the information security manager (ISM) of a financial and savings organization (NCU Financial Savings Bank, or NCU-FSB) with a clientele base of 250,000 customers averaging 1.2 million transactions per week. The IT infrastructure consists of 10 servers for each of the three locations: five for local production and five for replication and redundancy. After a recent vulnerability assessment performed by an external firm, specific threats and vulnerabilities were identified and needed to be addressed. The conceptual network diagram for NCU-FSB is displayed in Figure 3 (attached file)

The following findings were reported:

– MAC address conflicts that need to be resolved between telecommunications and network appliances (routers, switches, firewalls, servers, etc…)

– Security warnings coming from the proxy and email servers

– Constant firewall alerts classified as high

– Employee collusion in certain processes that can result in a significant financial loss to the organization

– Inconsistencies in data transmissions

– Attacks detected from external international sources caused by multiple critical servers that have been compromised due to vulnerabilities in the operating system, where the presence of additional services, opened ports, additional dynamic link libraries (DLLs), additional files and scripts added to the system partitions, and critical data missing from the server issues were detected

As the newly hired ISM of the organization, you have been tasked by the board of directors to analyze and layout a strategy to address risk issues and what aspects or areas should be considered when performing a security risk assessment. One of the first observations is the lack of segregation of duties (SOD) to reduce any collusion, but you recognize this could lead to an increase in the number of employees within your team. Budgetary constraints are against the addition of employees in your department.

For this assignment, you must write an article presenting the results of your analysis and initial data discovery (eDiscovery) in which you briefly answer the following questions:

– An introduction that addresses the essence of a security risk assessment. In this introduction, you will explain and defend the importance of having a risk management program in place, the main elements of a risk program, and the benefits derived from incorporating this strategy as part of the corporate security program.

– What solutions can you employ to reduce or even eliminate the possibility of collusion in the financial organization?

– How would you address the need to segregate duties (SOD) and rotate tasks, for it is a requirement by laws applicable to financial and savings institutions like Sarbanes Oxley (SOX) and Gramm Leach Bliley Act (GLBA)?

– What actions or changes in server setting and configuration must be made to avoid MAC address collision and server compromise?

– Discussion of the primary threats enterprises are currently facing, the impact, and a comprehensive analysis of how security must address these threats, attacks, and vulnerabilities.

– Different regulatory requirements that warrant a security risk analysis.

– Taxonomy of risk elements for cyber-risk management as part of the security risk analysis. Define the concept of taxonomy and its importance as part of the risk assessment and management process. Develop a table and relation diagram.

– Information needed to initiate a security risk analysis—eDiscovery process flowchart and explanation.

Length: 4-5 pages with a minimum of 3 scholarly references (within 5 years)

Resources:

– Grobler, J. (2018). Cyber risk from a chief risk officer perspective. Journal of Risk Management in Financial Institutions, 11(2), 125-131.

– Elnagy, S.A., Qiu, M., & Gai, K. (2016). Understanding taxonomy of cyber risks for cybersecurity insurance of financial industry in cloud computing…

– Knight, M. (2017). What is taxonomy? Dataversity.

– Tokunaga, R.S. (2017). Cyber-defense: A taxonomy of tactics for managing cyberstalking. Journal of Interpersonal Violence. 32(10), 1451-1475.

Case Study:

  

The following case study presents issues related to various levels of police encounters with a suspect and potential criminal evidence and the legal justification required for those encounters.

criminology

Description

The following case study presents issues related to various levels of police encounters with a suspect and potential criminal evidence and the legal justification required for those encounters.

Case Study:

Officer Taylor is on routine nighttime patrol when she notices a vehicle pass her driven by an African American female. The vehicle appears to have a broken taillight that appears to be covered with colored tape. She directs the driver to pull the car to the side of the road. The car is an older model gold Pontiac and as Officer Taylor walks to the driver-side of the vehicle, she remembers that a car fitting this general description was the suspected car in a recent road side killing of a fellow police officer.

The driver has long braids, tattoos, and a nose ring. As Officer Taylor looks at the driver, she thinks to herself, “Another one of those people we need to get off the streets.”

Wanting to make sure that she is safe, Officer Taylor asks the driver to step out of her vehicle for a brief pat-down for weapons. https://intellectualessay.com/2021/05/03/share-a-case-that-involved-a-client-who-reported-sexual-abuse-past-or-current/ She pats her down and finding no weapons, Officer Taylor asks the driver to have a seat back inside her vehicle. Officer Taylor then asks the driver for her driver’s license and registration. Instead of providing her driver’s license and registration, the driver speeds away resulting in a high speed chase.

The chase ends when the fleeing car hits a telephone pole and crashes.

Concerned that the car may ignite in flames from a leaking gas tank, Officer Taylor removes the unconscious woman to a safe distance from the vehicle. Officer Taylor returns to the vehicle to locate the driver’s purse for identification. As she enters the vehicle, Officer Taylor notices the glove compartment has popped open and that underneath some documents is a gun which she retrieves. Officer Taylor also retrieves the driver’s purse from the floor on the passenger side of the vehicle. Officer Taylor opens the purse to get the woman’s identification and finds what appears to be a baggie of marijuana. https://educatoressay.com/2021/05/08/socy201-emile-durkheims-work-on-suicide/ It is later determined that this vehicle was not the car involved in the shooting death of the fellow officer. It is also later determined that the taillight was not broken.

python programing

Assignment 5

Submit Assignment

  • Due Dec 11 by 11:59pm
  • Points 110
  • Submitting a file upload
  • File Types py
  • Available Nov 21 at 12am – Dec 11 at 11:59pm 21 days

Programming Assignment #5: Graph Solution to the Water Container Problem

What is the assignment?

What to hand in?

  • One (and only one) *.py file should be handed in. All your checks, unit tests should be inside of this file.
  • The name of the function in your program should be findWaterContainerPath, and it should except three integer arguments. 
  • Note that your program should be able to run at the console/terminal (e.g. $ python your_file.py). If it does not, then the execution portion of the assignment will be 0. 

What needs to be done?

  • Ultimately, all that needs to be done is to have a function, named findWaterContainerPath, return a list of states that represents a solution to the water container problem. 
  • Note that each state can be thought of a vertex on a graph, and the transitions between the states can be thought of as the edges. 
  • To successfully implement the function you will need to figure out what all of the possible state transitions (i.e. edges). You’ll then perform a BFS across all of these states; adding a state to your final solution path when it is used (and being sure to not add, or to remove, states that are not on the solution path).

Be careful… 

  • As with all assignments, do not copy code from the internet, and do not share/copy code directly from others. There are lots of poor implementations of this problem online, so even if you look at some to better understand the problem, be sure that you implement your own so that you can be confident that you understand what each step is doing. 
  • Remember, copying/sharing code is a violation of the Student Code of Conduct. If you are found to have been doing this, then the grade for this assignment may be a zero, and a report with the Dean of Students may be filed. 

Getting Started

  • Use the following code to get started if you like. If, however, you decide not to, be sure that you still name your function “findWaterContainerPath”, and that it accepts the three given arguments. 
import math
import unittest

def findWaterContainerPath(a, b, c):
    """ DOCUMENTATION FOR THIS FUNCTION """
    starting_state = (0, 0)
    final_path = list()
    final_path.append(starting_state)

    """ THIS IS WHERE THE REAL WORK FOR THIS ASSIGNMENT WILL BE """

    return final_path

""" ADD ANY OTHER (HELPER) FUNCTIONS THAT ARE NEEDED HERE """


class TestWaterContainerGraphSearch(unittest.TestCase):

    def testFindWaterContainerPath(self):
        """ INSERT DESCRIPTION OF WHAT THIS TEST IS CHECKING """
        """ IMPLEMENT YOUR FIRST TEST HERE """
        pass

    """ ADD MORE TESTS TO CHECK YOUR FUNCTIONS WORKS FOR OTHER VALUES """


def main():
    capacity_a = input("Enter the capacity of container A: ")
    capacity_b = input("Enter the capacity of container B: ")
    goal_amount = input("Enter the goal quantity: ")

    # ADD SOME TYPE/VALUE CHECKING FOR THE INPUTS (OR INSIDE YOUR FUNCTION)

    if int(goal_amount) % math.gcd(int(capacity_a), int(capacity_b)) == 0:
        path = findWaterContainerPath(int(capacity_a), int(capacity_b), int(goal_amount))
    else:
        print("No solution for containers with these sizes and with this final goal amount")

    print(path)


# unittest_main() - run all of TestWaterContainerGraphSearch's methods (i.e. test cases)
def unittest_main():
    unittest.main()

# evaluates to true if run as standalone program
if __name__ == '__main__':
    main()
    unittest_main()

Good luck!

Rubric

Assignment 5 RubricAssignment 5 RubricCriteriaRatingsPtsThis criterion is linked to a Learning OutcomeProgram Execution and Output30.0 to >25.0 ptsGoodProgram executes with no syntax or runtime errors and produces nearly all of the appropriate output when run through the test script (26pts – 30pts).25.0 to >10.0 ptsFairProgram executes with via the test script but does not produce all of the desired/correct output (11pts – 25pts).10.0 to >0 ptsPoorProgram does not execute via the test script without some modification and/or produces none or very little of the desired output in the test script (0pts – 10 pts).30.0 pts
This criterion is linked to a Learning OutcomeCode Logic and Design40.0 to >30.0 ptsGoodProgram has all required classes, variables, and methods defined (31pts – 40pts).30.0 to >10.0 ptsFairProgram has at least some but not all requisite classes, methods, or variables (11pts – 30pts).10.0 to >0 ptsPoorProgram has few or none of the classes, variables, or methods that were required (0pts – 10pts).40.0 pts
This criterion is linked to a Learning OutcomeCoding Standards and Documentation30.0 to >20.0 ptsGoodProgram has documentation for each class, method, function and this is displayed when using Python’s help function, “help()”. Documentation should clearly explain how and why methods are implemented as is (e.g. when and how does HashTable choose to resize itself). In addition to this, for full points the code should be consistently formatted, with consistency in how methods and variables are named (21pts – 30pts).20.0 to >10.0 ptsFairProgram has some documentation and is somewhat consistent in formatting, variable/method naming, etc. However, at least one of those is missing/incorrect (11pts – 20pts).10.0 to >0 ptsPoorProgram has little to no documentation, is not structured/formatted well, and does follow a consistent approach towards naming variables/method (0pts – 5pts).30.0 pts
This criterion is linked to a Learning OutcomeTesting10.0 to >5.0 ptsGoodProgram tests edge cases, or scenarios that would produce unexpected results using Python’s unittest (4pts – 5pts).5.0 to >2.0 ptsFairProgram tests for some edge cases but is missing important/obvious edge cases and may not be using unittest (3pts – 4pts).2.0 to >0 ptsPoorProgram has very few or no checks for edge cases, and does not make use of unittest (0pts – 2pts).10.0 pts
Total Points: 110.0PreviousNext

Questions

First question is a followup question…. I provided the question and answer……. Please answer in 150 words min 135

 (previous)1.  What are some of the advantages and disadvantages associated with a firm’s expansion into international markets?  

Answer: 

Advantages

Such firms are able to attain efficiency through leveraging of economies of scale. By selling the same goods in many international markets, firms buy inputs in bulk hence economies of scale as they are able to sell large amounts of money.

Global strategy is also beneficial in regard to product life cycle (Mourdoukoutas, 2012). A firm is able to phase product release, introducing products that are older into new markets thereby saving products launch.

Disadvantages

Such firms face macroeconomic risk. This is likely since all markets do not have the same tastes and preferences, popularity of products may be different for various nations, and price expectation may be different. This may cost the firms if they don’t consider diversity.

They also face operational risks. If the laws of the firm’ manufacturers change or even war breaks it will inconvenience operations in all other markets.

1. thank your for your great input.

Class, how does an organization brush up on a country’s culture and laws?  How do we prepare our employees to work in a different country?

2.   What are some of the important ways in which a firm can restructure a business?

My organization (higher education) restructured when a new President was hired. The organizational structure was reviewed and positions were shifted. This was to be more efficient, to serve our students better, and to allow more individuals being involved in the recruiting process.

Due to state budget cuts we then also had to make some changes at the end of the fiscal year 16 (06/30/16) and for the fiscal year 17 (07/01/16 through 06/30/17). We eliminated one senior leadership position and consolidated positions on all levels.

In review, we did a great job controlling our payroll expenses, but I must say the service is suffering at times. Speaking for myself by being responsible for the Finance department and for the entire organization and its finances it has created a 12 to 13 hour work day, which obviously is leading to burnout.

Class, what are your thoughts?

Respond to Pamela post

 

When I look through the Social Science lens, as it relates to air pollution, I think of human behavior and ask the questions; what actions or inactions do humans take to contribute to, or reduce air pollution?  Through the Natural Science lens, one could make a conclusion based on actual facts and data collected through scientific experiments and testing. 

After viewing air pollution through both lenses, I believe human behavior is the direct result of air pollution, therefore studying the topic through both lenses, seems the only logical choice. Through the Natural Science lens, we can study the root cause and consequences of air pollution.  Through the Social Science lens, we can mitigate the negative effects of air pollution by studying the human behavior directly related to the cause, and suggest alternatives. 

In this case, the two lenses, in a sense, cross-promote and collaborate with each other.  I do not believe my view on the topic has changed after looking through the two lenses, but I definitely have a better understanding of how the two are related and provoke thought.      

I am currently working on the Lens Chart, could you tell me if this is a project that is turned in? 

Module 03 Course Project – Company Technology and Social Media

 

Module 03 Content

  1. For companies today, technology presents great opportunities to deliver excellent customer service. However, they must embrace technology in order to enhance how the business functions and consistently provides a quality customer experience. Technology plays a central role in customer service today, and this role is only going to continue to increase. One example is the expanding role of social media as a powerful customer service tool and resource.

    Using your selected company write a 2-page paper supported by research that includes the following:

    • Describe how the company uses technology to meet customer needs.
    • Review the company’s page on a social media site and explain how it is used to provide customer service.
    • Review the company’s web site. Describe how it provides customer service and meets customers’ needs. Explain how it provides reasons for customers to use it.
    • What are the strengths and weaknesses of this site in providing the company’s customer service?
    • Your submitted assignment should be proofread for correct spelling, grammar, and punctuation. Be sure to follow APA formatting, use at least two references, and include both in-text citations and a references page.

      For APA guidelines, go to the Resources tab within the course.

      Submit your completed assignment by following the directions linked below. Please check the Course Calendar for specific due dates.

      Save your assignment as a Microsoft Word document. (Mac users, please remember to append the “.docx” extension to the filename.) The name of the file should be your first initial and last name, followed by an underscore and the name of the assignment, and an underscore and the date. An example is shown below:

      Jstudent_exampleproblem_101504

The Digital Revolution

 

Prepare: As you prepare to write your answer to the discussion prompt, review Modules 1 and 2, read the Week 1 Instructor Guidance, and watch the video (Links to an external site.) above.

Reflect: Consider how the digital revolution has transformed your life. Try to think of unique innovations other than the common cell phone, laptop, or microwave oven. Reviewing what your classmates have already posted will help you avoid redundant choices. The more unique your response, the more conversation you will generate! Since technology is constantly evolving, think about how technological advances in the future might impact your life. What are some benefits and drawbacks to innovative technology?

Write: For this discussion, address the following prompts:

Your initial post should be at least 250 words.

employee relations

The Final  Paper consists  of a discussion,  analysis,  and  application  of the concepts  of Employee Relations, Alternative  Dispute  Resolution ,and  choosing  the appropriate  type of  Business  Entity, with a specific  focus of  each of these areas of the law to the  role  of Christian  leadership  in  the workplace.  Biblical  passages should  be cited  in  support  of each of the legal  concepts. The paper is  due Saturday  (Day 7) of Unit  7. It will  be evaluated  using  the Unit  Assignments  and Final Paper Rubric  (Appendix  A). Use the text and  at least four  academic articles  as the general guideline  for preparing  your  analysis  and  approach. Research the Internet for  articles  and ideas (Wikipedia  is NOT considered  a source) to  tie specific  verses to specific  laws. Include  a discussion  of  biblical  law,  U.S. law,  a comparison  and  contrasting  of each, and  the historical development  and  basis of  U.S. law 

Prepare the Term Paper using  the following  guidelines 

:•3,500 –4,000 words

•APA-compliant  formatting,  including  title  and reference pages

•Include  Biblical  Foundations  application  section  (500  words minimum)  that  addresses the following: Christian  worldview  regarding  the course Biblical  passages related  to the  course Comparison  of Secular  and Christian  perspectives  related  to the course •Minimum  of five  scholarly references 

Introduction to film Discussion 1

Prior to beginning work on this discussion forum, read Chapters 1 and 2 in your course text and Chapter 2 in How Movies Work.

Reflect.png

Reflect

Your textbook, Film: From Watching to Seeing, makes a distinction between story and plot, stating that story is what happens in a movie, and plot is how it happens. The distinction may seem minor; however, throughout this course, you will be scrutinizing the various aesthetic choices and cinematic techniques that work together to create meaning, develop characters’ motivations, and advance the plot in any movie. With that in mind, you can see that how a film presents action can be very important.

  • A logline is a one-sentence description of a film’s story.
  • A plot summary is a compressed description of what happens in the film and why.

Write (due Thurday, Day 3)

Please choose a film from this list of approved choices. Note: If you would like to write about a film that is not on this list, you must email your professor for approval in advance or you may not receive credit on this discussion.

In at least 250 words, describe the relationship of story to plot in your chosen film. Be sure to

  • Identify the title, writer, director, major actors, and the year of the film’s release.
  • Summarize the story of your chosen film (what happens) in one sentence.
  • Summarize the plot of your chosen film (what motivates the sequence of events) in about five sentences.
  • Discuss whether the action in your film is presented chronologically or non-linearly. In your discussion, address the following:
    • What are some of the effects of this choice on the audience?
    • How are elements like character development or foreshadowing impacted by the choice of storytelling methods?

You must use at least two outside sources, in any combination of embedded video clips, still photos, or scholarly sources. All sources should be documented in APA style as outlined by the Ashford Writing Center (Links to an external site.). Please view the video Posting in a Discussion in Canvas (Links to an external site.) for guidance on how to integrate multimedia with your response.

Required Resources

Text

Goodykoontz, B., Jacobs, C. P., Meetze, J., & Pritts, N. (2019). Film: From watching to seeing (3rd ed.). https://content.ashford.edu/

  • Chapter 1: Watching Movies, Studying Films
  • Chapter 2: Storytelling

Book

Kawin, B. F. (1992). How movies work. https://www-fulcrum-org.proxy-library.ashford.edu/heb

  • The full-text version of this e-book is available through the ACLS Humanities E-book database in the Ashford University Library. Please read Chapter 2: Parts and Wholes. This book provides information about the discipline of film studies and will assist you in your Logline, Plot Summary, and the Relationship Between Story and Plot discussion forum this week. 

Supplemental Material

Pritts, N. & Meetze, J. (2020). List of approved movies. https://ashford.instructure.com

  • This file is available in the online classroom. This document provides an extensive list of movies that are approved for the assignments for this course in Weeks 2 and 3, as well as the Final Paper in Week 5.

Recommended Resource

Web Page

American Film Institute. (n.d.). AFI’s 10 top 10 (Links to an external site.). https://www.afi.com/afis-10-top-10/

  • This web page provides information about the 10 greatest films in 10 classic genres and may assist you in your Logline, Plot Summary, and the Relationship Between Story and Plot discussion forum this week.
    Accessibility Statement does not exist.
    Privacy Policy

Access Control and Risk Management

 

It is an accepted truth that without risk there can be no gain. Every individual and organization who wants to succeed must take some risks. Network security and its impact on risk management is not about not taking risks, but about taking risks in a controlled environment for which one must understand the risks, their triggers and their consequences.

Write a four to five (4-5) page paper in which you:

  1. Contrast access control in relations to risk, threat and vulnerability.
  2. Explain the relationship between access control and its impact on CIA (maintaining network confidentiality, integrity and availability).
  3. Describe access control and its level of importance within information security.
  4. Argue the need for organizations to take implement access controls in relations to maintaining confidentiality, integrity and availability (e.g., Is it a risky practice to store customer information for repeat visits?)
  5. Describe the necessary components within an organizations access control metric.
  6. Use at least two (4) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

  • Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
  • Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

  • Explain the basic concepts and need for network security and risk management.
  • Use technology and information resources to research issues in IT network security.
  • Write clearly and concisely about topics related to IT network security using proper writing mechanics and technical style conventions.