Chapter 2 Exercises & Case Exercises Essay

Kim, D., & Solomon, M. G. (2012). Fundamentals of Information Systems SecuritY. Sudbury: Jones & Bartlett Learning.

The next step is to identify the risks, threats and vulnerabilities. Hackers attack from the Internet, failure of hardware or software systems, or network outages are the most common threats. And common vulnerabilities are absence of firewall and antivirus software, absence of update patches, not adequately trained associates etc.

* Identify risks, threats, and vulnerabilities in the 7 domains of a typical IT infrastructure

Lab #1 – Part A – List of Risks, Threats, and Vulnerabilities Commonly Found in an IT Infrastructure

The world of cyber security continues to introduce new threats each year against network infrastructures and computer devices. In the recent years, the impact from cyber-attacks has wreaked havoc on many company brands and organizational reputations. As this issue grows so does the technology to prevent and protect against these malicious attacks. It is absolutely crucial for organizations and businesses to shift focus from defense for different types of attacks to improving safeguards to mitigate the loss of sensitive data when an attack occurs. In addition to the traditional security technology used to detect an attack, companies will have to include

Cyber-security demands are ever increasing in the field of Information Technology with the globalization of the internet. Disruptions due to cyber-attacks are affecting the economy, costing companies billions of dollars each year in lost revenue. To counter this problem

Stallings, W., & Brown, L. (2012) Computer security: Principles and practice (2nd ed.). Boston, MA: Pearson.

In order to diminish both security and privacy risks to organizations, measures need to be taken to combat risks throughout the various stages of the threat’s life cycle. Specific processes must be implemented to identify threats, procedures to follow when the attack occurs, and finally methods to recover from the attack (Houlding, 2011).

Dougherty, C., Householder, A., & Houle, K. (2002). Computer attack trends challenge Internet security. Computer, 35(4), 0005-7.

The second instalment of lab exercise for the MIS 515, Information Security in Private and Public Sector involved a general fact finding about a selected target. It was intended to get us familiar with the various tools we could use to in assessment of networks and websites. We were asked to follow some steps given to us in the assignment narrative and see what we could find on our own.

In the three maintained products the threats and risks are to be identified. Such as the data base securing, user identification, authorizing proper managers, protections from hackers and updated firewalls and less vulnerable software.

A threat agent is a specific component that represents a danger to an organization’s assets. And a threat is an object, person or entity that represents a constant danger.

As mentioned above the first threat in this threat modeling process is vulnerability and threat source identification. In this step it is job of the threat modeler to perform research to identify detailed sources of information about threats and vulnerabilities. When choosing sources about threat and vulnerabilities it is essential to ensure that the sources are up to date and credible. This often requires the threat modeler to look for published sources of information or even scholarly websites to ensure the integrity and accuracy of the information. One example of an excellent source for information about threats and vulnerabilities which are commonly used by threat modelers in the National Institute of Technology’s National Vulnerability Database. This is an up to date government repository of identify vulnerabilities

Identify and describe the six components of an information system. Which are most directly affected by the study of computer security? Which are most commonly associated with its study?

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.