Title: Assignment 2 - Security Examination
Course: KVCC BUS214 > Section: Assignments

In the first chapter, we have been discussing much of the concerns when it comes to securing information and keeping a business safe. This assignment is to get you to think about this in relation to some business that you have a connection to in either your personal or professional life. These considerations should help you begin to narrow down topics for your final project.

1.           What field is the business you are considering part of?

2.           Overall, initially how would you rank this business in terms of their information security? Why?

3.           In class, we have discussed the CIA triad. Examine this business with this triad in mind and answer the following questions:

a.           Give a good example for each of the levels. Explain why you believe in each of the examples the business did a good job.

b.           Now give a bad example where the company failed. Explain each.

4.           When considering the CIA triad there is the understanding that each of the areas need to be present to maintain security. If this is understood then the next consideration is towards what could potentially compromise these legs of the triad. Of the areas we discussed in class I would like you to focus on the following:

a.           Vulnerability

b.           Threat

c.           Exploits

Examine the same business and provide an example of each. Describe how they could be combatted/fixed within this environment.

5.           Once you examine the areas of concern then the next step will be to develop safeguards to protect against these concerns. In class we discussed the following categories:

a.           Administrative

b.           Technical

c.           Physical

Provide an example for each and then evaluate whether or not you think they are effective, explaining why.

6.           Once we understand the area of threats and safeguards that we can implements the next consideration is what areas of risk exist for that organization. For this question, I would like you to create a list of four risks that this business faces. Once you have this list provide a scenario using one of the four risk strategies. You should use each of the below areas once within your scenarios:

a.           Risk Avoidance

b.           Risk Mitigation

c.           Risk Transfer

d.           Risk Acceptance

7.           After all, of this consideration does your initial rating of this business change? Why/Why not?

Attached Files: | - KVCC BUS214_InfoSystemsSecurity_Assignment 2.pdf