Readings:

Montasari, R., & Hill, R. (2019). Next-Generation Digital Forensics: Challenges and Future Paradigms. 2019 IEEE 12th International Conference on Global Security, Safety and Sustainability (ICGS3), Global Security, Safety and Sustainability (ICGS3), 205. https://doi.org/10.1109/ICGS3.2019.8688020

Sahinoglu, M., Stockton, S., Barclay, R. M., & Morton, S. (2016). Metrics Based Risk Assessment and Management of Digital Forensics.  Defense Acquisition Research Journal: A Publication of the Defense Acquisition University, 23(2), 152–177. https://doi.org/10.22594/dau.16-748.23.02

Nnoli, H. Lindskog, D, Zavarsky, P., Aghili, S., & Ruhl, R. (2012). The Governance of Corporate Forensics Using COBIT, NIST and Increased Automated Forensic Approaches,  2012 International Conference on Privacy, Security, Risk and Trust and 2012 International Conference on Social Computing, Amsterdam, 734-741.

Q1. 275 words

The readings this week expand on investigation and of digital forensic analysis and investigations. Organizations, especially those in the public, health and educational areas are bound by legal and statutory requirements to protect data and private information, therefore digital forensics analysis will be very beneficial when security breaches do occur. Using this weeks readings and your own research, discuss digital forensics and how it could be used in a risk management program. 

Q2. Research Paper:   —  SEPARATE Document —- 5 full pages  

 After reading the above articles, please write a research paper that answers the following questions: 

• What are mobile forensics and do you believe that they are different from computer forensics?
• What is the percentage of attacks on networks that come from mobile devices?
• What are challenges to mobile forensics?
• What are some mobile forensic tools?
• Should the analysis be different on iOS vs Android?

 Your paper should meet the following requirements:

• Be approximately 5 full pages in length, not including the required cover page and reference page.
• Follow APA7 guidelines. Your paper should include an introduction, a body with fully developed content, and a conclusion.
• Support your answers with the readings from the course and at least two scholarly journal articles to support your positions, claims, and observations, in addition to your textbook.
• Be clearly and well-written, concise, and logical, using excellent grammar and style techniques. You are being graded in part on the quality of your writing.

Q3. Practical Connection Assignment   —  SEPARATE Document —- 2 full pages  

Textbook: 

Fraser, J., Simkins, B., & Narvaez, K. (2014). Implementing enterprise risk management: Case studies and best practices. John Wiley & Sons

Provide a reflection of at least 500 words (or 2 full pages double spaced) of how the knowledge, skills, or theories of this course have been applied, or could be applied, in a practical manner to your current work environment. If you are not currently working, share times when you have or could observe these theories and knowledge could be applied to an employment opportunity in your field of study. Requirements:

• Provide a 500 word (or 2 full pages double spaced) minimum reflection.
• Use of proper APA formatting and citations. If supporting evidence from outside resources is used those must be properly cited.
• Share a personal connection that identifies specific knowledge and theories from this course.
• Demonstrate a connection to your current work environment. If you are not employed, demonstrate a connection to your desired work environment. 
• Any use of outside sources, including your own prior work, will result in a zero on the activity and a report being filed with Academic Affairs regarding plagiarism (even if self-plagiarism).

 NO PLAGIARISM!!!!!!!!!!!

Option #1: Can you Fix a Toxic Culture Without Firing People? (75 points)

Read the following case study.

Gino, F. (2018). Case study: Can you fix a toxic culture without firing people? https://hbr.org/2018/11/case-study-can-you-fix-a-toxic-culture-without-firing-people (Links to an external site.)

When reading this case study, pay close attention to the messages being sent and reinforced within the organizational culture.Write a paper reflecting on the messages that have created this toxic organizational culture. If you were hired as a consultant to help turn around this toxic organizational culture, where would you start to begin to shift the messages being sent?Include information from the module readings as well as your own personal experience and knowledge.

Keep in mind this is academic writing. It should be written in third person and should not include unsubstantiated opinions, but rather facts and theories. Your well-written paper must adhere to the following parameters:

• 4 pages in length, not including the title and reference pages.
• 3 scholarly references cited in the assignment. Remember, you must support your thinking/opinions and prior knowledge with in-text citations and references; all facts must be supported; in-text citations used throughout the assignment must be included in an APA-formatted reference list.
• Formatted according to CSU Global Guide to Writing and APA Requirements (Links to an external site.).

Reach out to your instructor if you have questions about the assignment. 

 

Assignment Description

Please read the scenario below, and then answer the questions that follow in a 3 page analysis. The questions will guide your analysis of the situation, but need to be presented as part of a complete analysis of the audit process.

Scenario:

Please watch the following video and then respond to the associated questions.

Go and watch video @ youtube.com  and search for Audit and Assurance Services Chapter 1

1. What type of audit objectively obtains and evaluates evidence regarding assertions about economic actions and events to ascertain the degree of correspondence between those assertions and established criteria and communicates the results to interested users?
2. What type of company sells its stocks or bonds to the public, giving the public a valid interest in the proper use of the company’s resources?
3. Who represents independent professional services that improve the quality of information, or its context, for decision makers?
4. What type of audit is related to the financial accounting information of a company?
5. What are the three major categories of audits?
6. What type of audit does the Sarbanes–Oxley Act requires auditors of publicly traded companies in the United Sates perform to provide assurance on both the financial statements and the effectiveness of internal control over financial reporting?
7. What is a major subset of assurance services called?
8. What does the definition of attest engagements refer to?
9. What type of attestation refers to an audit that involves historical financial statements and provides the highest form of assurance that CPAs can offer.
10. What type of audit is dependent upon the existence of verifiable data and of recognized criteria of standards, such as established laws and regulations or an organization’s policies and procedures?
11. What is an attest engagement that is substantially lesser in scope than an examination and is designed to lend only a moderate degree of assurance?
12. What type of risk includes the possibility that the financial statements might contain material that depart from generally accepted accounting principles?
13. What is the principal goal auditors when investigating and appraising the effectiveness with which the various organizational units of the company are carrying out their assigned functions?
14. What examination is a uniform national examination prepared and graded by the American Institute of Certified Public Accountants?
15. What type of risk is related to information used to assess business risk that is not accurate?

Submitting your assignment in APA format means, at a minimum, you will need the following:

• Title page: Remember the running head. The title should be in all capitals.
• Length: 3 pages minimum
• Abstract: This is a summary of your paper, not an introduction. Begin writing in third person.
• Body: This begins on the page following the title page and abstract page and must be double-spaced (be careful not to triple- or quadruple-space between paragraphs). The typeface should be 12-pt. Times Roman or 12-pt. Courier in regular black type. Do not use color, bold type, or italics, except as required for APA-level headings and references. The deliverable length of the body of your paper for this assignment is 5 pages. In-body academic citations to support your decisions and analysis are required. A variety of academic sources is encouraged.
• Reference page: References that align with your in-body academic sources are listed on the final page of your paper. The references must be in APA format using appropriate spacing, hanging indent, italics, and uppercase and lowercase usage as appropriate for the type of resource used. Remember, the Reference page is not a bibliography but a further listing of the abbreviated in-body citations used in the paper. Every referenced item must have a corresponding in-body citation.

Scenario

The Vice President of Finance called you into a meeting to discuss the overall vision and future of your company. He states that he has always admired International Business Machines (IBM) since he studied the company in college. The VP has not followed the company as of late and would like you to prepare an update as to how IBM is doing over last three years and the top line outlook for next year. The VP would like you to use similar techniques that you have used in writing your previous reports.

Instructions

Using the financial statements of International Business Machines Corporation excel spreadsheet that is attached:

1. Prepare an income statement vertical and horizontal analysis of International Business Machines Corporation using three years of data. Use Mergent Online to download income statement to Excel.
2. Be sure to search for International Business Machines Corp, and choose the United States entity.FAQ for accessing and downloading income statements
3. Using the line item descriptions from the income statement, create a new tab and identify which expenses (costs) are likely fixed, variable, product, and period costs.
4. Using Mergent Online, create a ratio analysis report showing International Business Machines Corporation and its largest 4 competitors based on total revenue
5. Download the following ratios and peer average into Excel. Format and arrange the data in a professional manner:
6. Current Ratio
7. Gross Margin
8. Inventory % of TA
9. Inventory Turnover
10. Debt/Equity Ratio
11. Net Current Assets % TA
12. Net PPE % TA
13. Net Profit Margin %
14. Operating Margin %
15. R + D % TR
16. ROA %
17. ROE %
18. ROI %
19. Selling and General Admin % TR
20. Total Asset Turnover
21. Using the historical income statement data, prepare a sales (revenue) forecast for the upcoming year including your assumptions, calculations, and rationale.
22. Using the SEC.gov website, find articles on of International Business Machines Corporation and comment in a Word document on any recent accounting standards or ethical considerations that affect the company.

This assignment consists of two (2) sections: 

a written paper and 

a PowerPoint presentation. 

You must submit both sections as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for. In the day-to-day operations of information security, security professionals often focus the majority of their time dealing with employee access issues, implementing security methods and measures, and other day-to-day tasks. They often neglect legal issues that affect information security. As a result, organizations often violate security-related regulations and often have to pay heavy fines for their non-compliance.  Thus, as a Chief Information Officer in a government agency, you realize the need to educate for senior leadership on some of the primary regulatory requirements, and you realize the need to ensure that the employees in the agency are aware of these regulatory requirements as well. 

Section 1: Written Paper1. Write a 10 page paper in which you:

a. Provide an overview that will be delivered to senior management of regulatory requirements the agency needs to be aware of, including:

i. FISMA
ii. Sarbanes-Oxley Act
iii. Gramm-Leach-Bliley Act
iv. PCI DSS
v. HIPAA
vi. Intellectual Property Law

b. Describe the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.c. Describe the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.d. Use at least five (5) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources. 

Your written paper must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA.

here is the example of APA:  Must follow this format please!!!!   Understand how the title page and reference page need to be included and also running head and header!

https://owl.english.purdue.edu/owl/resource/560/18/

• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required page length.

Section 2: 

PowerPoint Presentation

2. Create an 12 slide security awareness PowerPoint presentation that will be presented to the agency’s employees, in which you:

a. Include an overview of regulatory requirements and employee responsibilities, covering:

i. FISMA
ii. Sarbanes-Oxley Act
iii. Gramm-Leach-Bliley Act
iv. PCI DSS
v. HIPAA
vi. Intellectual Property Law

Your PowerPoint presentation must follow these formatting requirements:

• Include a title slide, 10 main body slides, and a conclusion slide. 

The specific course learning outcomes associated with this assignment are:

• Explain the concept of privacy and its legal protections. 
• Describe legal compliance laws addressing public and private institutions. 
• Analyze intellectual property laws.
• Examine the principles requiring governance of information within organizations.
• Use technology and information resources to research legal issues in information security.
• Write clearly and concisely about information security legal issues and topics using proper writing mechanics and technical style conventions.