Reference no: EM131253377
Assigment
Imagine you are a digital forensic investigator for a healthcare organization. You learn from your internal information security department that an employee has been using password-cracking software to access confidential patient health information (PHI). The account information extracted is unknown at this time, though it appears as though multiple computers were being used for the crime and it isn't clear whether an attack is currently in progress. The employee has been detained but his computers remain online.
Write a two to three page paper in which you:
Develop a detailed plan to approach and secure the incident scene based on the information you have from the scenario.
Discuss the initial steps you would take for the investigation, depending on whether or not the attack is still in progress. Include how your actions would differ based on the current status of the incident.
Explicate the importance of creating an order of volatility by identifying the potential evidence that is the most volatile. Explain, in detail, how you would extract this evidence.
Identify the high-level steps that would be performed in collecting and analyzing the evidence. Include steps that are required, as well as what should not be done, in order to maintain the potential admissibility of evidence.
Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
Advise the company as to their legal position
: TLAW 202 - CORPORATIONS LAW - TERM ASSIGNMENT QUESTIONS. After a number of years, Simon and Michael meet another solicitor who they think is more efficient than Don and they appoint him as solicitor for Millennium Pty Ltd. Don brings legal action a..
|
Describes changes in returns on capital
: Suppose that the Home country in the two-sector (manufacturing and agriculture) specific-factors model has a comparative advantage in manufactured output. Which statement below best describes changes in returns on capital and land after trade occurs?
|
Major advantages of staffing project with quantum employees
: Do you agree with Ms. Thomas"s decision that the project should be staffed internally? - What are the major advantages of staffing the project with Quantum employees?
|
Search the ahima website
: Search the AHIMA website and other websites for articles that have been written in the past year regarding compliance with respect to the HIPAA Security Rule.
|
Discuss initial steps you would take for the investigation
: Discuss the initial steps you would take for the investigation, depending on whether or not the attack is still in progress. Include how your actions would differ based on the current status of the incident.
|
What kind of evidence is provided and how good is it
: What are the value and descriptive assumptions
|
Benefits of an mnc of accepting the global market concept
: Discuss the benefits of an MNC of accepting the global market concept. - Explain the three points that define a global approach to international marketing.
|
Write a program in c++ which reads a string
: The output should indicate the position where the first offending parenthesis is found if the string is not properly nested and balanced. Use a stack to track the left parenthesis.
|
Using the term demand correctly
: A local farmer relates that he can sell 50 dozen ears of corn per day at his roadside stand. "But if I raise my price," he claims, "the demand will fall." The farmer is using the term "demand" correctly, and is right in his conclusion.
|