Reference no: EM132910684
BIT361 Security Management and Governance - Melbourne Polytechnic
Case study scenario: (Moving Fast Supplies, MFS)
In discussing the questions below, you may use information from the MFS Case Study.
Q1. Risk management is focused on developing strategies and controls for known vulnerabilities. Contingency plans are strategies and tactics for dealing with unexpected events: what to do when the risk management processes fail.
A. List the components of contingency planning for information security.
B. Business Impact Analysis (BIA)is an important part of Contingency planning. Briefly describe the BIA process and explain its relevance to Incident Response, Disaster Recovery and Business Continuity Planning.
Q2.Formal policy development, implementation, and compliance are important to medium and large organisations.
A. Write a paragraph explaining the reasons why formal policy statements are essential in these organisations.
B. Describe what elements compliance statements should contain in a policy document.
C. Suggest a program to ensure awareness and compliance to the policy.
D. Describe how you could determine the success of your program?
Q3. MFS needs to determine how to prioritize the security arrangements for several of their assets. In brief discussions with them, you obtain the following information:
Asset Asset impacts Threats and vulnerabilities (Frequency)
Main Branch Server Services Little importance to profitability, little impact on public image, and little impact to the success of organisation Human error: Misconfiguration of software (2/yr), Hardware failure: Equipment lifetime failure (3/yr)
SafeTrans Software Some importance to profitability, Some impact on public image, little impact on success of organisation Incorrect entries (100/yr)
Product Design Data Important to profitability and public image, strong impact on the success of organisation Compromises to intellectual property: Copyright infringement (10/yr), patent infringement (1/5yr)
Product Installation Staff Essential to profitability, No impact on public image, Critical for the success of organisation Design Skills Shortage: Employee leaves (2/yr)
A. Using this information and your general knowledge, complete the following tables. Show all calculations.
B. When you have completed the tables, write a paragraph discussing the relative priorities of the assets and how that will affect security planning for these assets. You should include some discussion of the types of controls that should be considered for the different assets and their vulnerabilities.
Q4. MFS has identified several possible control measures for the improvement of their information security. Currently the data in Table 1 and Table 2 below has been determined.
A. Complete a Cost Benefit Analysis for the items in the tables below.You may need to add columns or rows. Show all calculations.
B. Discuss, in detail, which of these controls should be implemented, considered, or rejected.
Attachment:- Security Management and Governance.rar