Simulation Mistral Bank

As you can see, there is a lot going on in the NIST Cybersecurity Framework’s Protect Core Function. The processes, procedures, best practices and training needed to protect organisations from outside threats are vast and often overwhelming for mangers and decision makers. The NIST Framework is there to offer guidance.

The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. As we know, GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.

The cybersecurity simulation rounds in UMUC?s Cybersecurity Master 's degree capstone are an integral part of the learning program. The simulation rounds expose students to real world incidents in a cyber representation of the US. In this environment students are provided a chance to gain experience in a setting where mistakes are far less impactful than those made in the real world. The environment includes five critical infrastructure sectors; DTL Power, Federal Government, Hytema Defense, Mistral Bank and Avisitel Telecom. The control decisions made by each have the potential to impact other groups operating within the environment.

Among one of the missions of The U.S. Department of Homeland Security is to protect and preserve the security of the Cyberspace in the country. The principal objective of this Security Plan is to give instructions and direction for the Department’s workers and help the Homeland Security to create best practices and strategies in the IT security system.

Before I plan for security, I will ensure that the suitable officials are assigned to security responsibilities, continue reviewing the security system controls in their information systems, and authorize the system processing before the operations. These management responsibilities are believed to have responsible agency officials that understand the risks and other factors that could affect the mission. Additionally, these officials must also understand the current status position of their security program and the security controls that protect their information and the information systems that makes investments that mitigate the risk to an acceptable level. The objective is to conduct a day-to-day operation and to accomplish missions with adequate security, including the increase of harm resulting from unauthorized access, modification, disruption, usage, or disclosure of information. The key element of FISMA Implementation Project, NIST developed a Risk Management Framework which will bring all of the FISMA related guidance and security standards to promote developmental comprehension and balance information security programs by different agencies.

Under the new Appendix J’s Business Continuity Plan (BCP) cyber resilience guidelines, credit unions and their third-party service providers need to consider and incorporate the potential impact of a cyber-event. FFIEC notes five categories of cyber risks credit unions and their third-party service providers will need to address when updating their BCPs: 1) malware, 2) insider threats, 3) data or systems destruction and corruption, 4) communication infrastructure disruption, 5) and simultaneous attack on financial institutions and technology service providers. Below is a brief description of the five categories and FFIEC’s recommendations:

- Analyze the vulnerabilities - how is the critical information relayed daily and how is it protected?

The bank’s information security posture needs improvement base based on the number of deficiencies detailed thought this ROE. However, to management credit and to further strengthen the security process, on November 21, 2017, management decided to outsource the Chief Information Security Officer (CISO) position with a qualified IT security firm. Management contracted GRC Solutions to act as the bank’s CISO. Mr. Frank Getter, Senior Consultant at GRC Solutions will perform the functions as the new CISO. Mr. Getter is a Certified Information System Security Professional (CISSP) with over twenty years of experience in the information technology management, operations and information security field. Mr. Getter appears to have the necessary

In order carry out this mission DoD must have the ability to first defend its most important networks, data identify and prioritize of important networks and data to the department. This plan will allow DoD to work and operate within a disrupted and degraded cyber environment in any event that an attack on their networks. In other words, DOD strategic plan should protect its critical infrastructure and operations to improve its contingency plans in case of any attack. The idea is to build and maintain a strong security architecture and joint Information Environment to move the focus from protecting just one service-specific networks but to secure the entire DoD enterprise including agencies under the DOD. In addition, the strategic plan should have staff and personnel with the capability to mitigate all known vulnerabilities that present a high risk to the department. Also work strong layered defense by working with the counterintelligence, and whole of government agencies to defend any type of

As technology and innovation advances, the Department of Defense must be ready to conform to protect cyberspace from cyber criminals. In order for the Department of Defense to effectively manage cyber space, it is extremely important that the Department of Defense develop and implement constant training programs for new and existing customers so that they are aware and prepared for any cyber attack or vulnerability that may be present. Employees must also be held accountable for proper maintenance and use of information. Programs should be created to move employees throughout various roles and duties within the Department of Defense to prevent both a single point of failure, as well as any situation that may arise due to job complacency. Real world scenarios should be created and rehearsed unknowingly to employees, this could prevent another security breach such as Operation Buckshot Yankee. The Department of Defense and the Defense Advanced Research Projects Agency should continue to develop software that can not be exploited. By maintaining these programs and growing with cyber space as innovation continues to grow and advance, the Department of Defense will be able to successfully defend the United States from any major attack that foreign nations or cyber criminals

Citibank developed two different strategies for each market segments, some of the strategies for MNCs are secure platforms to access services, local and global which can offer fast and worldwide capabilities. Also provide fraud and identity theft protection, showing the advantages of online real time banking

The scenarios that Mark jumped into, being that conference a room of senior officials who have all the authority and power that they need to take certain kinds of decisions that will change things beyond our borders. It was an on-the-spot exercise that actually made me think harder and allowed me to grasp better the basic knowledge and understanding of cyber security that I have gained throughout this semester.

Security Officers must obtain a consensus for which mitigating controls are key, which can be a trying negotiation between the CISO, Chief Technology Officer, Cyber Threat Intelligence (CTI), Infrastructure Engineering, Audit and Assurance teams, and the Investment and Audit committees. How do you harness your entire organization to focus on a common agreed-upon list of key security controls?

The purpose of his proposal is to provide inquiry and identify the best way to implement fundamental plans to individuals who wish to build and run a small business in addition to the lack of information they may bear on the importance and sustainability of protecting their networks and data against cyber-attacks.

For the purpose of this discussion we will narrow the breadth of ManTech’s numerous ventures within a variety of technology sectors to their recent focus on Cyber Security.