CYB 200 Module Two Case Study Colby (2)

.docx

School

Southern New Hampshire University *

*We aren’t endorsed by this school

Course

200

Subject

Information Systems

Date

Oct 30, 2023

Type

docx

Pages

Uploaded by DukeFog10607

2-3 Activity: Data Protection Case Study Kerry Colby CYB-200 Daniel Wand 09/09/2023 CYB 200 Module Two Case Study Template

After reviewing the scenario in the Module Two Case Study Activity Guidelines and Rubric document, fill in the table below by completing the following steps for each control recommendation: 1. Specify which Fundamental Security Design Principle best applies by marking all appropriate cells with an X . 2. Indicate which security objective (confidentiality, availability, or integrity) best reflects your selected control recommendation. 3. Explain your choices in one to two sentences, providing a selection-specific justification to support your decision. Control Recommendations Least Privilege Layering (Defense in Depth) Fail-Safe Defaults / Fail Secure Modularity Usability Security Objective Alignment (CIA) Explain your Choices (1-2 sentences) Automatically lock workstation sessions after a standard period of inactivity. (Completed as an example) X C I chose layering because it adds another layer of protection for the confidentiality of our data. If possible, close and lock your office door when leaving your computer. X C I choose layering because adding a locked door adds an extra layer to keep the items inside confidential. Use technology to make sure that only authorized software executes, and unauthorized software is blocked from executing on assets. X C + I I choose fail- safe/fail-secure because it blocks unauthorized software from executing. Fail- secure protects data in the event

Control Recommendations Least Privilege Layering (Defense in Depth) Fail-Safe Defaults / Fail Secure Modularity Usability Security Objective Alignment (CIA) Explain your Choices (1-2 sentences) of a breach or alter so I also went with C + I Use automated tools to inventory all administrative accounts to ensure that only authorized individuals have elevated privileges. X A I choose least privilege because people with more authorization can access info that others may not. This also aligns with availability because only certain info in available for curtain individuals. Use system configuration management tools to automatically reapply configuration settings to systems at regularly scheduled intervals. X I I choose modularity because each task is broken into its regular intervals. I also selected integrity as it is maintained in a correct and updated state. Maintain an inventory of all sensitive information stored or transmitted by the organization's technology systems, X A I choose usability because while

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version