The following questions are related to one another. please do not provide already uploaded answer Place yourself in a position of a newly hired cyber security specialist in XYZ company. Its main busincss is creating application solution for business organization. Part of its product are custom made point of sales application, human resource application and e-commerce application. XYZ stores customer data on premise and on the cloud. Potential customers could register for XYZ services via their website. Currently it has management and human resource department, rescarch and development department, IT department and network department. Its physical office has separate floor between employee and server room. Its employee is placed in different rooms and cubicle based on their department and job roles. Question 1 The first thing you need to do is perform a basic risk assessment for the organization. 1. Identify TWO (2) possible critical assets for the organization and justify your answer. 2. List and explain ONE (1) vulnerability for each of the asset that you have identified. 3. Explain ONE (1) type of threat that could exploit each vulnerability that you have listed.

The following questions are related to one another. please do not provide already uploaded answer Place yourself in a position of a newly hired cyber security specialist in XYZ company. Its main busincss is creating application solution for business organization. Part of its product are custom made point of sales application, human resource application and e-commerce application. XYZ stores customer data on premise and on the cloud. Potential customers could register for XYZ services via their website. Currently it has management and human resource department, rescarch and development department, IT department and network department. Its physical office has separate floor between employee and server room. Its employee is placed in different rooms and cubicle based on their department and job roles. Question 1 The first thing you need to do is perform a basic risk assessment for the organization. 1. Identify TWO (2) possible critical assets for the organization and justify your answer. 2. List and explain ONE (1) vulnerability for each of the asset that you have identified. 3. Explain ONE (1) type of threat that could exploit each vulnerability that you have listed.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

SmartBiz is a large financial and stockbroker company. 8 years ago SmartBiz decided to establish a full- fledged EA practice to accommodate with the growing problems around non-transparency of its ITinvestments and poor business and IT alignment in general. The establishment of EA practice wassuccessful, and it was completed last 1 year. Due to recent advancement in technologies, SmartBizwants to implement Cloud Computing technologies that would empower their staff and customers forexample, implementation of analytical Cloud Computing Technologies that would enable SmartBizstaff to approve credit card application within 30 minutes of the submission of the application.However, SmartBiz’s CEO is sceptical towards the implementation of cloud computing technologies.He believes that the company is only wasting money on the cloud computing technologies as it isessentially nothing more than a sophisticated collection of data.As a newly promoted IT manager at SmartBiz, you are required to…
You are the lead security architect for an e-commerce company that uses Azure services to manage customer data and transactions. The organization aims to enhance access security and minimize the risk of unauthorized access. a) Analyze the benefits of Azure Active Directory (Azure AD) Multi-Factor Authentication (MFA) in the context of the ecommerce company's authentication strategy. Describe how MFA works and explain how it helps prevent unauthorized access to customer accounts. b) Given the company's requirement to manage privileged access, assess the role of Azure AD Privileged Identity Management (PIM) in enforcing just-in-time (JIT) access for administrative roles. Explain the steps you would follow to implement JIT access using PIM and discuss the advantages of this approach.
Company BackgroundRajawali Airlines is air transport services sector, though the company has already had a few other clients in the transportation sector. The company was founded 7 years ago. Rajawali Airlines issued shares through an initial public offering (IPO) seven years ago and has been traded on the Indonesia Stock Exchange. Rajawali Airlines wants to hire Auditor to issue an it audit opinion and obtaining help to optimise their recently installed new IT system and the integrated IT-controls. As Rajawali Airlines wants to aggressively expand from a national to regional market, Rajawali Airlines plans to use capital from a loan or share capital in the course of a second public offering. Since the implementation of a new IT System, there have been ongoing difficulties with the company's new accounting system. The representatives of Rajawali Airlines note that the earnings vary considerably in recent years, but Rajawali Airlines enjoys a good reputation and high acceptance among…
eCabs is a newly created taxi service company that provides online booking for clients in the Lusaka province. eCabs has considered developing a simple website for an online booking System with the capability to enable clients access from their mobile devices and to book for a trip. At the time of their first booking, clients should be able to enter their details into an online form, along with their credit card details. However, clients can also have an account with eCabs and for any subsequent bookings, they can log in to their own account and make a booking for a taxi. They need to be able to enter their trip origin and destination. The system will give them an estimate of cost according to their trip description. Assuming you have been assigned to design and develop the system for eCabs. You are given three weeks to come up with a blueprint of the system design and present the design to a team of consultants. The online booking System should be able to perform a number of…
Setup an AWS Instance for a fake business with billing alerts, compliance (document), server, Identity/Access Management, S3, monitoring, and services that match your business requirements (need to define). Take at least one screenshots per service. Simple explanation and requirement of the fake business.
Alice, who works in the human resources department at the Cho Manufacturing plant, is constantly being asked by employees how much is taken out of their pay cheques for insurance, taxes, medical, mandatory retirement, and voluntary retirement. “It takes up to a few hours every day,” says Alice. She would like a Web system that would allow employees to use a secure logon to view the information. Alice wants the system to interface with health and dental insurance companies to obtain the amount remaining in the employee’s account for the year. She would also like to obtain retirement amounts saved along with investment results. Alice has a high regard for privacy and wants the system to have employees register and give permission to obtain financial amounts from the dental insurance and retirement companies. Draw a use case diagram representing the activities of the Employee Benefit system. Write up a use case scenario for the use case diagram you constructed for Cho Manufacturing. What…
Question 2RackAfrica operates the leading carrier-neutral Data Centre in Ghana, offering colocation services, disaster recovery and IT infrastructure solutions to leading organisations in all major industries and government, in Ghana and abroad. Based on the following they have one of the robust data centre around the world;• Secured Physical & Virtual Platform: We are PCI-DSS certified. Our Data Centre utilizes advanced security technologies such as biometric access control and surveillance cameras in addition to 24/7 physical security. Only authorized personnel with approved credentials are allowed into the Data Centre. All employees have undergone a thorough background security check and advanced training. • Multiple Internet & Power Feed: RackAfrica offers multiple redundancy of power, cooling and network infrastructure. Our Data Centre is connected to multiple carriers and Internet Service Providers for redundant bandwidth. Over the last 24 months we have had uptime in…
Wise Limited has an online platform for purchase and sale of goods and services which connects customers all around the world. It provides additional services of invoicing and data collation for sellers on the platform. Sellers process sales orders and transport the orders to the customers. Payment is made through the platform directly to the seller for which Wise limited collects a fee for invoicing services Further to the requirement of the Code of Corporate Governance Wise limited has decided to change its auditors after a period of 10 years. Your firm was approached and due process followed in the appointment of new Auditors including appropriate professional clearance. The audit is now set to commence. You are the Audit Manager responsible for this engagement but some of your Team members are not conversant with controls in on-line businesses. 1. On-line business makes use of electronic data interchange. Evaluate FOUR risks associated with the application of electronic data…
Government of India has a plan to launch a uniform identity smart card for the entire Indian citizen. The smartcard will have the details like photograph, Gender, DOB, address along with a multimodal biometric authentication. This multimode can be finger print, Iris etc. This card can be used as a proof of address, identification and citizenship. Since the card requires getting vital information from the individual, it is expected that this project may face political, social, economic and security issues. Draw ER diagram for the above Mention initial final states also.
The Reliable Pharmaceutical Service (RPS) provides pharmaceutical preparationand delivery services to 12 different nursing homes in major cities Thailand. RPSaccepts orders for nursing home patients and delivers the orders in locked cases to eachnursing home. The service employs approximately 12 delivery personnel, 20pharmacist’s assistants (PAs), six licensed pharmacists, and various office and clericalstaff.Orders are normally phoned in by nurses or administrative personnel within each unitof a client nursing home. A nursing home unit is either an entire floor or a wing withina floor (for example, third floor east wing). Orders identify the unit, individual patientsby name and room number, drugs prescribed, dosage, and quantity. Some prescriptionsare specified as a standing order, which is filled for each delivery until the prescriptionis specifically canceled. Orders are entered into a computer system as they are received,and a case manifest is immediately prepared. Orders are…
Question 9 NAG Describe what a secure score is for in a company using Azure services. How is the score obtained? If a network has a theoretical 100 percent score, does that mean it is fully protected from failures or threats? Full explain this question and text typing work only We should answer our question within 2 hours takes more time then we will reduce Rating Dont ignore this line
Alice in the human resources department at the Cho Marketing plant is constantly being asked by employees how much is taken out of their paychecks for insurance, taxes, medical, mandatory retirement, and voluntary retirement. "It takes up to a few hours everyday," says Alice. She would like a Web system that would allow employees to use a secure logon to view the information. Alice wants the system to interface with health and dental insurance companies to obtain the amount remaining in the employee's account for the year. She vuld also like to obtain a retirement amount saved along with investment results. Alice has a high regard for privacy and wants the system to have employees register and give permission to obtain financial amounts from the denial insurance and retirement companies. a. Draw the ER- Diagram of the system. B. On what level of management is Alice working? Explain in a paragraph.