Reference no: EM133965062

Categorize Phase: Describe the system, as described in task C-1 of the RMF, and then categorize the system's security impact level (low, moderate, or high) according to FIPS 199 and 200 standards, as described in task C-2 of the RMF. Justify your categorization. A moderate-impact system is a system where at least one security objective is assigned a moderate impact value, and no security objective is assigned a high impact value.

Select Phase: Select the appropriate security controls to protect your system commensurate with risk, as described in task S-1 of the RMF, tailoring controls to your specific organization, as described in task S-2 of the RMF, and then allocate controls to the system and its environment, as described in task S-3 of the RMF. Document how these controls will be implemented, as described in task S-4 of the RMF. Finally, describe your system's continuous monitoring strategy, as described in task S-5 of the RMF, and state that the system's security and privacy plans have been reviewed and approved, as described in task S-6 of the RMF. Your reliable and affordable assignment help starts today!

Implement Phase: Explain how the selected security controls would be implemented within the network infrastructure as described in task I-1 of the RMF, and discuss the need for updating control implementation plans, as described in task I-2 of the RMF.
Assess Phase: Describe how you would assess the effectiveness of the implemented security controls (task A-1 of the RMF), including your choice of assessor and assessment methodology (task A-2 and A-3 of the RMF), and how you would document the assessment results (task A-4 and A-5 of the RMF), including developing a plan of action and milestones to address any identified deficiencies (task A-6 of the RMF).
Authorize Phase: Explain the process for developing an authorization package for submission to the authorizing official, if in government or company leadership if private sector (task R-1 of the RMF), and how the risk would be analyzed and determined (task R-2 of the RMF) to reach a decision regarding authorization (task R-3 of the RMF). The authorization decision is directly linked to the management of risk related to the acquisition and use of component products, systems, and services from external providers.
Monitor Phase: Describe how the network infrastructure will be continuously monitored, as described in task M-1 of the RMF, including change management strategies (task M-2 and M-3 of the RMF), and conducting periodic reviews of the system's security controls, as described in task M-4 of the RMF, as well as how you will generate security and privacy reports (task M-5 of the RMF).
Mission-Critical Focus: Demonstrate how the security plan prioritizes and protects mission-critical assets and functionalities, aligning security measures with core organizational goals, using the mission-critical approach described in our class material.
Conclusion: Summarize your secure network infrastructure plan and discuss its strengths and potential challenges.