Information Security Case Study: Premier Collegiate School

Review the risks – the effectiveness of the precautions in place should be checked regularly to ensure that they are sufficient.

Both Wireshark and NetWitness Investigator can be used for packet capture and analysis. Which tool is preferred for each task, and why?

Computers are an important tool that many students use during college to accomplish tasks for classes. Laptops are commonly used around campuses; however, they don’t always prove to be strong enough to complete all the tasks that college students would like to run. When a laptop isn’t large enough to run all the software a student would like, a desktop computer comes next in power. A desktop computer is capable of more customization to fit the needs of a person with its performance and visuals. Most colleges offer desktop computers that can run advanced programs, however it is not always convenient to a college student to have to go onto campus to use this software. This is why it is more suitable for college students to have their own desktop PC at home.

This analysis discusses some issues and requirements to correct these issues that are outlined in the Turn Key University (TKU) data breach case study. In addition to these issues and requirements, some applicable laws will be discussed and some controls will be suggested for implementation.

Specify the red flag(s) that Target overlooked or ignored before the retail attack and give your opinion as to why Target overlooked or ignored the red flag(s).

If the user can access the file server using an IP address but not a name, then the most likely reason for failure to connect is a name resolution problem. Name resolution can fail for NetBIOS or DNS host names. If the client operating system is NetBIOS dependent, the VPN clients should be assigned a WINS server address by the VPN server. If the client operating system uses DNS preferentially, VPN clients should be assigned an internal DNS server that can resolve internal network host names.

 You will learn to recognize security events and baseline anomalies that might indicate suspicious activity.

plan many classrooms have desktop computers or laptops for the students to use (2014). Some

According to the University of Connecticut, they developed this information security manual to protect everything from the availability, data integrity, and the use of the University’s resources. Even though this policy applies to all students, faculty, and staff its primary purpose is towards the Data Stewards, who are people that are in charge of maintaining access to data and IT resources. Violation of this Security Policy may result in disciplinary action according to local, state, and federal laws, as well as university laws and by-laws. (Information Security Office, 2012)

Computer security is the security applied to the computers and their networks including the internet. Physical security and information security are the two types of computer securities which prevent theft of equipment and data. (Man, 2015).

An effective information security program should include, periodic assessments of risk, including the magnitude of harm that could result from the unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the organization. Policies and procedures should be based on risk assessments, cost effective reduced information security risk, and it should ensure that the information security is addressed throughout the entire life cycle of each and every organizational information system. Subordinate plans for providing sufficient information security for groups of the information system, facilities, networks, or information systems.

-Effective, regular risk assessments to check that the safeguard policy and plans are effective and working

“Physical, personnel, IT, and operational security controls are to be evaluated at least annually and the appropriate remedial action taken. Risk assessments are to be conducted regularly to ensure that risk mitigation activities are commensurate with the risk and magnitude of harm that could result from unauthorized access,

In the past, academic and administrative computer systems were isolated, either for security reasons or as a result of limited interconnectivity with other computers. Today, nearly any information that an administrator, teacher, student or parent might is available through a network connection. Course lectures are presented are viewed and students submit their assignments via the internet school class shell. Student and parents can view their grades online, administrative paperwork and other information can be shared through a variety of systems. The internet is an awesome and convenient way to communicate, but it introduces

On Monday July 11, 2016 at about 1130 hours, Sgt. Anthony Laporta and I were present at Epic Security located at 2067 Broadway, NY. to interview Mr. Joe DeVittorio. While at the location Mr. Devittorio disclosed the following information;