Information Security Performance Evaluation Program

Passwords should be designed to prevent them from being discovered by unauthorized persons. All passwords should have at least eight (8) characters. The user-IS should never be used as the password. Words in dictionary, derivates of user-IDs, and common character sequences such as “123456789” should not be employed.

Using proxy software Burp Suite it was discovered that the shopping site contained a hidden form field that could be manipulated.

Describe how to complete and maintain documentation in accordance with organisational procedures, in relation to:

Both Wireshark and NetWitness Investigator can be used for packet capture and analysis. Which tool is preferred for each task, and why?

For "ODS DCD DCW MOA ISA IT-T-020 Template" The CMP you requested is attached for your review of the Roles & Responsibilities. DCD/DCW has over 80 MOA's so we would appreciate keeping this information at a high level (in the CMP) vs. updating the CMP and 80 + agreements to keep documents in sync. The POC's in Appendix B & C have been updated.

* Identify risks, threats, and vulnerabilities in the 7 domains of a typical IT infrastructure

Target of Evaluation: An IT system, product or component that is identified/subjected to require security evaluation.

The organisation undertakes or commissions a programme of assessments and audits of its information and IT security arrangements.

Harris, S. (2006, November 5). Developing an information security program using SABSA, ISO 17799. Retrieved September 19th, 2015, from

Premier Collegiate School has a staff of thirty (30) faculty members, including administrative staff and teachers, and an enrollment of 300 students. The school maintains two (2) servers, one for student usage applications and software, and one for administration. Also, teachers have ten (10) computers located in the teacher’s lounge; and each administrative personnel have dedicated computers (10) at their disposal. Each student is required to provide their own laptop with wireless access (ITT technical institute, 2016).

The primary performance measures are related to student achievement based on standardized tests. Still, as with any organization today, cyberspace support plays an important part in reaching the strategic goals which include organization excellence and outreach. The IT division supports the DoDEA goals by “delivering reliable, secure, high-performing and cost-effective networks and services to our students, teachers and staff.” (CSP, 2013) The IT division is comprised of five branches: CIO-Enterprise Architecture, System Development, HQ Operations & Customer Support, Information Resources, and Information Assurance.

For example a clerk will only be able to access a limited amount of information, such as inventory at each store. The limitations will be different for an accountant or the mangers. All information will be protected with several different layers of security. The first layers will be simple hardware protection for access to the network; from there the security will increase with password protection and restrictions to users. (Merkow & Breithaupt 2006)

Information security analysts have important roles in detecting and prevention of threats to electronic assets. They have valuable roles in keeping businesses safe from hackers and other threats to sensitive information. It is a growing field and it is worthwhile to obtain an information security analyst degree.

There were a number of factors that contributed to the breach, which had they been addressed or had corresponding mitigation responses in place, would have reduced the likelihood that the breach would have taken place, or at a minimum reduce the impact of the attack. These items range from policy related issues, technology implementations, and security management and maintenance. Although I believe a number of these areas were in the process of being addressed, based on the information gathered regarding the details of the incident, it appears that it was still in many areas insufficient and would not have prevented an incident even if there had been more time available to perform the implementations.

Throughout history, PMS clearly have a considerable contribution to evaluate the success of organisations. According to Neely et al. (2002), performance measurement is "the process of quantifying the efficiency and effectiveness of past actions". Moullin (2003) indicates that "PM is evaluating how well organisations are managed and the value they deliver for customers and other stakeholders". The modern accounting framework can be traced back to the Middle Ages and since that time appraisal of performance has primarily been ground on financial criteria (Bruns, 1998).