CMGT 582 Week 3 Risk Management Paper 1

Xander L. is a 17-year-old African American male and documented gang member. His prior juvenile adjudications include purse snatching, breaking and entering, and drug possession. His first juvenile adjudication occurred when he was 13 years old. He has served a year of custody in the juvenile correctional facility and has been placed on probation twice

In my past job, the company mandates risk assessment before doing for any business transactions, so that we are in compliant with relevant regulations and do not do any risky deals that end up with litigation or incur losses to our business. The guidelines also apply for non-business transactions and any internal decisions. The strategy is to take a risk that is known and manageable or spread, so that we add value to the company's profit and shareholders. The task was to scale the current information system, so that we can comply with regulatory requirement which always has time commitment.

8. Which domain requires annual security awareness training and employee background checks for sensitive positions to help mitigate risk from employee sabotage? The user domain. Employees should at least be aware of social engineered attacks and potential risk that they, the employee could do.

An important part of this training will involve communicating key parts of the security policy so that employees will have an adequate understanding of potential threats and their remedy.

Preventable infections regardless of the causative agent, have become major triggers of unintended patient outcome, increased morbidity, and mortality (Arias, 2010). Methicillin Sensitive Staphylococcus Aureus (MSSA) and Methicillin Resistant Staphylococcus Aureus (MRSA) are the most common causes of healthcare associated infections (HAI) and outbreaks in acute care hospitals and community settings (CADTH, 2010). The widespread infection with the MRSA pathogen is believed to have increased from 2.4 percent in 1975 to 29 percent in 1991 and 2003 in hospitals across the United States (U S) (CADTH, 2010). The prevalence is even greater among Intensive Care Unit (ICU) patients at 53 percent (CADTH, 2010) and continues to rise due to the widespread

The use of pesticides is an important decision that thousands of communities face each year. Nobody likes dealing with mosquitos and the diseases they bring so using chemicals and pesticides is an option but with other consequences. Mosquitos carry West Nile Virus that affects the city of Genericville every year with 50 cases projected this year in the city and two fatalities as well. On the other hand, the chemicals proposed for controlling the mosquito population has its own risks. The pesticide Malathion is also dangerous to people if they come in contact with it before it degrades. The potential for citizens of the city being exposed is almost a certainty

Security awareness training is written into the universities policy to ensure that information security training is giving to anyone who needs to access confidential data.

For HIV patients having more than > 2 risk factors based on above table-1, use Framingham Risk assessment tool (available at http://hin.nhlbi.nih.gov/atpiii/calculator.asp) to estimate 10 year risk of cardiovascular event or myocardial infarction(MI). However, it has not validated in patients with HIV, is endorsed by international societies such as IDSA [11]. Framingham risk tool over predicted risk in patients who did not receive ART and under predicted risk in patients on ART [12]. Although the utility of this tool in the HIV population may not be optimal but it is likely a reasonable starting point for assessing cardio vascular risk. The highest risk people are those with established cardiovascular disease and those without established

When cybersecurity policy is discussed the topics often focus on technology, corporate culture, and security awareness. The success of an organization in defending its most valuable asset, data, depends on the proper implementation of several security practices. Ensuring that the “human aspect” of cyber security is addressed is vital, for the culture of an organization can greatly impact both the security posture and defense of information networks.

Whitman, M. E., & Mattord, H. J. (2014). Management of information security (4th ed.). Boston, MA:

The next step will focus on the creation of security awareness for the entire company through a computer based training or CBT to let the members be fully aware of the objectives coming up with the ID cards for purposes of access control as well as overall security for the company. Security awareness training will be implemented to inform the suppliers, contractors and all the workers in the company the importance of what is being implemented. Everyone will know about the company’s expectations, as well as the details to follow so that everyone will become incorporated into the IT security system. This step will include informing them of the information security risks that are associated with their activities. An example of this would be leaving their ID card unattended. The employees are not allowed to leave their CAC unattended at any time. The responsibilities that are required of all employees will be included in the training so that everyone will comply with the organization procedures and practices designed to reduce the risks within the company. (Brotby, 2009)

Managers in the information technology sector are faced with various challenges. Above all, the single most cybersecurity vulnerability remains to be individuals or employees in organizations. This is because lapses in the security system always start with members of staff. Moreover, the above-mentioned individuals are the primary defense mechanism. The range of activities that come up as a result of human error are many, most of the time involving acts of trespass, extortion, vandalism and even theft. The reason behind vulnerability is in the fact that efforts of protection are easily defeated and would only require a person who is against your interests in a particular way. An example is a scenario where an employee decides to infect the system of an organization with a virus. Nevertheless, the same person could become negligent in his duties and give an unauthorized colleague usernames and passwords to systems. The consequences that lie in this would be dire in that it can facilitate crime and sharing of files, which may be considered confidential by a company.

The best defense against security breaches within an organizations network is prevention and awareness. In recent years, organizations are starting to understand that network security is critical, due to the fact that breaches are becoming more frequent with data and information being compromised, stolen, or altered. In 2014, about 71% of organizations were affected by cyberattacks, and around 52% are expecting to be victim again in 2015 (Shephard, 2015.). A study recently conducted regarding cybercrime to the global economy, has estimated the cost at $1 trillion, with malware being introduced at 55,000 pieces per day (Bidgoli, 2015.). To help in prevention, organizations should keep their employees informed of new developing threats that could affect their technology that is being used, by creating awareness through forms security training.

The senior management of the company is committed to achieving a superior security governance by treating INFOSEC as a crucial business component. The aim of the policy is to create a security conscious environment and to exhibit to all parties, internal and external, the application of fundamental security principles notably taking responsibility for information security, applying security controls in relation to the risks and individual accountability.

The analysis of 2,260 breaches and more than 100,000 incidents at 67 organizations in 82 countries shows that organizations are still failing to address basic issues and well-known attack methods. The (DBIR, 2016) shows, for example, that nearly two-thirds of confirmed data breaches involved using weak, default or stolen passwords. Also shows that most attacks exploit known vulnerabilities that organizations have never patched, despite patches being available for months – or even years – with the top 10 known vulnerabilities accounting for 85% of successful exploit “Organizations should be investing in training to help employees know what they should and shouldn’t be doing, and