|Assignment ID Number||AFFGEHU83939HD|
|Type of Document||Essay|
Chapter 8, Exercise 1
Management of information security, Third Edition
1. If an organization has three information assets to evaluate for risk management purposes as shown in the accompanying data, which vulnerability should be evaluated for additional controls first? Which vulnerability should be evaluated last?
Data for Exercise 1
Explain your reasons.
a. Switch L47 connects a network to the Internet. It has two vulnerabilities: (1)susceptibility to hardware failure with a likelihood of 0.2, (2) susceptibility to an SNMP buffer overflow attack with likelihood of 0.1. This switch has an impact rating of 90 and has no current controls in place. There is a 75 percent certainty of the assumption and data.
b. Server WebSrv6 hosts a company Web site and performs e-commerce transactions. It has Web server software that is vulnerable to attack via invalid Unicode values. The likelihood of such an attack is estimated at 0.1. The server has been assigned an impact value of 100, and a control has been implemented that reduces the impact of the vulnerability by 75 percent. There is an 80 percent certainty of the assumptions and data.
c. Operators use the MGMT45 control console to monitor operations in the server room. It has no passwords and is susceptible to unlogged misuse by the operators. Estimates show the likelihood of misuse is 0.1. There are no controls in place on this asset; which has an impact rating of 5. There is a 90 percent certainty of the assumptions and data.
0 – 1 Points
2 – 3 Point
4 – 5 Points
Unprofessional communication; many errors; no APA
Minor grammar, spelling, and APA errors
Postings are professional and in standard written English with APA
Complete addressing of assessment criteria
Criteria not fully addressed
Minimal response to criteria; minor aspects missing
All criteria are fully addressed
Evidence of critical thinking or extending information
Critical thinking or extending information not evident
Obvious responses to questions; little thought evident
Posts demonstrate critical thinking with evidence base from research or experience
No connections provided
Minimal connections provided to readings/activities
Clear connections to readings/activities
Submitted an overview / summary of the case selected for analysis. Also identified those procedural steps to be analyzed.
Did not provide an adequate overview or summary of the selected case or failed to identify those steps to be analyzed.
Provides an adequate overview or summary of the selected case and steps to be analyzed though may not be clear or complete.
Case overview is clearly presented including all appropriate investigative steps to be analyzed.
Tired of getting an average grade in all your school assignments, projects, essays, and homework? Try us today for all your academic schoolwork needs. We are among the most trusted and recognized professional writing services in the market.
We provide unique, original and plagiarism-free high quality academic, homework, assignments and essay submissions for all our clients. At our company, we capitalize on producing A+ Grades for all our clients and also ensure that you have smooth academic progress in all your school term and semesters.
High-quality academic submissions, A 100% plagiarism-free submission, Meet even the most urgent deadlines, Provide our services to you at the most competitive rates in the market, Give you free revisions until you meet your desired grades and Provide you with 24/7 customer support service via calls or live chats.