Reference no: EM132491613

CIS2103 - Principles of Information Assurance, Security and Privacy Assignment - Higher Colleges of Technology, UAE

Advanced Amalgamated Technologies Project Case Study

Project Tasks - PART 1

Assume you are the head of the team from the consulting company that handles the analysis of AAT. Answer the following questions under each of the following headings and write your conclusion and recommendations to AAT.

NOTE: Students are required to answers to the following questions (section A through J)

A. Section 1: Introduction.

Based on the case presented, write three paragraphs as introduction of the company

B. Section 2:

Write an overview of Information security related problems facing AAT

C. Section 3:

Briefly, analyze the AAT Information Systems' characteristics using the Expanded CIA triad

D. Section 4:

Identification, Classification and application of controls to the company's Assets.

a. From your understanding of the risk and vulnerability problems faced by AAT, what strategy will you recommend for AAT to apply

b. List at least 4 controls AAT will apply to reduce existing risks

E. Section 5:

Naming the threats the company/organization is facing.

a. Create a table listing at least 4 security threats AAT is currently facing, that are not listed in table 1

b. List at least 2 newly identified security threats that AAT is facing

F. Section 6: Recognizing the Vulnerabilities in the company's assets.

Create a table listing at least 5 assets and their associated vulnerabilities

G. Section 7:

Risk Calculation

a. From the information provided in table 2, calculate risk(s) associated with each vulnerability

a. From the CBA calculation determine which ACS cost is/are justified if any

H. Section 8:

Listing and classifying the countermeasures used or recommended Address the following subsections:

a. The Security-­-Related Technology implemented/needed.

b. The SETA program implemented/needed

c. The Information Security policies implemented/needed

I. Section 9: Conclusion

a. Write your conclusion summarizing your recommendations

b. Discuss and give your recommendations related to any changes needed with respect to technology, policies, human capital and other structural changes

J. Section 10: References

List at least 5 relevant references cited within your project

Note - Read all the file but need to write about only part 1 section c & d.

Attachment:- Principles of Information Assurance, Security and Privacy Assignment File.rar