Title: Assignment 4 - Project Planning
Course: KVCC BUS214 > Section: Assignments

The goal of this assignment is to get you to start to solidify the direction of your final project for this course. We have not discussed this much in class however we have been doing work towards it in the assignments and exam. We will discuss this more in the days to come however your task is to first select a business and then conduct a complete security analysis (this could be a current business or one you plan on starting). Some of the topics we have discussed already include:

1.           Basics on Security

a.           CIA Triad

b.           Classifications

i.                    Asset

ii.                  Threat

iii.                Threat agents

iv.                Vulnerabilities

v.                  Exploits

c.           General Attacks

d.           General Defense

2.           Access Controls

3.           Identity management

a.           Authentication

b.           Authorization

c.           Hardening

d.           Active Director

e.           Linux

4.           Cryptography

5.           Policies and Procedures

Areas to still cover:

1.           Physical Security

2.           Defenses

a.           Perimeter

b.           Network

c.           Host

d.           Application

e.           Data

3.           Security Audits

Think about these above topics and answer the following questions:

1.                   What business will you examine? (You can leave the actual name out and describe what they do)

2.                   Why did you select this business?

3.                   What level of focus does this business currently have when it comes to security?

4.                   Do they have policies and procedures already when it comes to security?

i.     If so how effective do you think these policies are

ii.     If not what kind of policies should they have?

5.                   Describe their network security?

6.                   Describe their physical security?

7.                   How could this business use cryptography?

8.                   Based on an initial assessment how would you rank their defenses? Why?

9.                   What have you completed so far and what are you currently working on in relation to this project?

10.               What are your next steps?

Attached Files: | - KVCC BUS214_InfoSystemsSecurity_Assignment 4.pdf