Answered You can buy a ready-made answer or pick a professional tutor to order an original one.
CIS527- IT Risk Managemen
Assignment: Managing Organizational Risk
No longer than a decade ago, IT security professionals had to work hard to persuade organizational leaders about the importance of developing effective risk management plans. Nowadays, due to the plethora of cautionary tales that organizations history provide, business leaders are informed on the need to manage risk and understand the crucial role of an organization’s IT infrastructure on its ability to perform business.A computer incident response team (CIRT) plan can help prepare organizations for incidents that might occur.
Write an eight to ten (8-10) page paper in which you:
- Describe the objectives and main elements of a CIRT plan.
- Analyze the manner in which a CIRT plan fits into the overall risk management approach of an organization and how it supports other risk management plans.
- Provide at least two (2) examples of how CIRT plans define the who, what, when, where, and why of the response effort.
- Analyze the manner in which the development of a CIRT plan enables management to adopt a more proactive approach to risk management. Include recommendations for remaining proactive in the continual improvement and update of CIRT plans.
- Infer on the evolution of threats over the last decade that organizations must now consider.
- Predict the evolution of regulatory requirements mandating risk management processes and plans.
- Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
- Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
- Create a Computer Incident Response Team (CIRT) plan for an organization in a given scenario.
- Use technology and information resources to research issues in IT risk management.
- Write clearly and concisely about topics related to IT risk management using proper writing mechanics and technical style conventions
- @
- 966 orders completed
- ANSWER
-
Tutor has posted answer for $80.00. See answer's preview
******************** ************** Risk(Student’s name)(Institution’s ***************** Organizational **************** of *** **** * ******* is ******* finally ** incident *** ****** **** ** one ** ready ** handle alone ** could ** due to ************ ********* ************ ** *** ***** ** **** ** *********** to **** *** ********* ****** or make *** ********* decisions ********* ** is ********* *** all ********* ** **** a contingency **** ** **** *** an efficient information ********** ******** ******* needs * ******** incident ******** **** *** plan *** three ******** ***** *** ******* of what *** **** *** **** **** ***** *** ******** ** a ******** ******** ******** **** ****** *** ********** ********** *** ********* and ******* **** *** ******** ********* ******** *** ******** and **** ******** ** * CIRT ******* ******* ** *** CIRT is ** ***** ************ ** **** of *** ********* ****** **** as malware *** ***** ********* ******** breaches denial ** service ******* *** data ******** ******* ** al ***** ** an organization ***** * ******** ******** response **** ** ****** detect ** ****** in **** ** follow *** ******** ******** to cover *** ****** *** revive it ***** the ****** has **** ********** ****** the *********** ** *** **** *** ************ ***** ** ********* *** ********* ***** *** ***** and *** coverage of *** ******* **** ********* with *** ********* *** ********** **** ** **** the computer ******** ******* *** ******* *** policy ***** ***** **** ************ ******* and ********* ************ ** **** ******** *** ******** **** establishing *** ** ********** *** ****** a ****** ********** or ******* ******* **** is connected to *** ******** network or ****** Finally the **** ****** ********** *** *** ************ ***** with *** security *** ** ***** and *** kind ** ******* *** plan will cover ** **** ****** establish *** **** ** *** ********* *** **** needs ** be filled *** ******* if *** ************ *** Microsoft ******* *** UNIX servers and ****** mainframes *** *** **** **** ****** **** ******* ** ** *** ********* *** *** **** to include **** or ********* **************** ******** ******** ******** plan *** *** *** ******** ******* ** al 2014) ***** ** *** *********** segment ***** the ** ***** *** ***** *** ******** ** ****** ********* threats should **** ****** ******** identification **** ********* ** *** threat is a ******** incident ******* ** *** ****** ** * security ******** *********** **** ******* the damage ** *** occurrence and ********* of *** ******** ******* **** ****** **** ****** ****** the root ** *** ******* ** ********** and *** ********* ******* are ********** from the production *********** ***** ******** allows *** affected ******* **** into *** ********** ******* with * guarantee **** there *** ** **** ******* ******* *** entire document is ******** to ******* ** ******** *** learn **** the ***** *** ******* the future ******** exertions2 ******* *** manner ** ***** * **** **** **** **** *** ******* **** management approach ** ** ************ *** *** ** supports ***** risk ********** ************ ********** ** ******* ** *** process ** *********** **** ********* **** and ****** *** ********* ***** ** ******** *** *********** ** * ************ ***** The risk ********** approach *********** *** tools **** responsibilities *** ***** processes *** techniques *** ** individual ******* ********** ** ** ***** ********* **** ********** ** administered *** ******** *** several **** ************ ***** risk ********** ****** *** ************ ***** to ** employed with ****** ************* and ********** by *** ********** ** *** ******** ****** fully ********** *** endorse the ******** incident ******** plan ********* **** strive to ********** *** accept the **** management doctrines ******** *** **** ******* ***** a ******** ******** in *** entire organization Irrespective ** *** processes ***** ********** they *** ******* the capabilities ** ******* ***** *** ***** ********* **** **** **** *** be executed ********** *** ********** ** **** ** * ****** ******* *** more *********** awareness of *** *** ********* ***** *** ****** ***** ********** ***** the CIRT plan ****** *** ************ ** view **** ** ** *************** *** comprehensive basis **** of the CIRT ***** are ********** ** ******* ** ****** of ******** certain ***** who are ***** ** *** *** *** plans ***** ****** other ******** ** *** ************* *** example CIRT ***** changing systems ** bank ************ could **** **** *********** processes ** ******** Therefore an organization requires ***** that enable *********** ** **** up offering *** administrators ************ **** ** *** **** to ********* better ********* *** **** *********** ** ********** ******* ** least *** *** examples ** *** **** plans define *** *** **** **** ***** *** *** ** *** response ********** ** ******** has **** ******** the ****** ** ***** ****** ********* who **** **** where *** why ** ****** ** ************ *** handled *** procedures **** ***** **** *** ******** ** *** ***** management *** will ****** ** use *** ** *** *** ************ *** ******** ********* ************ and prosecute” *** “protect *** ********* ********** et ** ***** The ****** needs **** some ******** ********* ** created ** **** *** team ** the ******** ****** Some of *** processes ******* installing ******* ******* ******* *** activity of *** ****** ** logged and ********* and ******* ****** ** *** ******* *** persons **** ** *********** ** *** ********* ***** those ************* ** *** ******** response are *** to discuss ******** ****** their *************** ********** ********** *** **** ** ****** that *** ******** “Where” ********** ***** the ****** occurred ********* identifies *** launcher of *** ******* “When” defines the **** ** the assault “Why ********** *** ****** *** the ****** *** ********* *** motive *** ******* * ******* ************* credit cards and later **** **** ** ******* ***** ****** ***** ************ ** hired a ****** ** **** at *** supermarket using the fake cards until **** ran out of **** *** **** **** the ***** ** **** ********* In such ** ***** the ******* **** *** the **** **** ** to ******** *** **** of attack ** ** ***** is ******* as **** ***** **** *** mall ** ***** *** ****** happened ******* answers the ******** *** *** staged *** ****** **** *** shooting ******** is depicted ** the ****** **** ***** the ***** *** *********** ********* ** ***** *** ** **** ** ********* *** above *********** without the ******** ******** ******** team ** **** *** **** had to review intrusion detection ******** **** *** ******* ******* ** its ******* ** concludeViewTorch ** * ********* remote ******* ******** **** ******** the *** **** when ***** *** *** ** *** ** ********** mainly ******** ** ******* ***** *** **** ** *** ************* ******* 2016) ******** ********** ** this include ****** ********** *** ********* Porsche *** the ******** *** Cross ** previously ********* ** organization defines CIRT ** ******* ******** ******** ViewTorch *** ****** ** Timothy ** ******* **** Greenberg’s *** ***** ** *** ***** ****** *** ***** ** *** **** ** *** York ********** **** *** ****** *** *** **** ******* who *** decided ** **** matters **** *** own ***** rather **** ****** ** ** *** authorities As Andy ***** ******* ********* *** ********** wipers *** the air vents **** ** *** the ************ *** ********* *** ****** ** this *** ******* ******* *** ******** ** who ****** ********* and ******** ********** ******** *** *** York ** the ***** *** ******** **** *** ****** occurred ** the **** **** ******* **** ******* of *** air vents and the wind ****** wipers *** **** that **** ***** *********** *** ******* *** the attack ********* ******* *** ****** ** ***** *** development ** * CIRT **** enables ********** to ***** * **** proactive approach to **** ********** Include recommendations for ********* active in *** ********* *********** *** ****** ** CIRT ******************* ** risk management ****** ** ** a proactive ****** **** reactive ****** ******* ** ** ***** Also events should *** ***** risk ********** ** they ****** ******** the ***** of ******** *** ******** ******** are *** good *** the company ** **** **** *** ** *********** less ** ***** ******** than **** ******* *** company should ********* better **** ********** ******* ** ** **** ********* *** ***** ******* ******* **** *** ************ ****** a comprehensive **** management ******** ** *** ******* *** ******* value ** this ******* develops **** awareness ** **** end the ********** of *** ******* can ** **** ******** and **** judgment enabledEstablishment ** *** ******** ********* ******** (CIRT) plan ******* *** ******* to ********* *** ********* ******** **** the ************ *** ****** *** *********** ***** in ******** The agency ****** ******* strategies **** coincide **** *** ************** ***** while ****** precautionary ******** that **** **** *** ***** **** proactive risk ********** ** **** ********** ** an event *** ************* ** a risk *** ********** to lowering *** ******** ****** ** ******* (Ruefle et ** ***** *** **** ***** ** ****** *** managers ** staying ******** ** the latest computer ******** **** *** affect the ******* *** measures that **** **** the ************ ** **** *** *********** *** *** risk ******* **** *** **** ******** ********** in *** ******** *** ******** *** ******* *** *** ************ ************* ought ** ***** on ************ the ********* ******** ** the attainment ** efficient risk ********** The **** **** ****** ** *** ****** position ** ** *** ****** * CIRT plan that *** ** **** ** ****** *** ***** ******* ** al ***** *** ********** ****** and improvement of *** **** ***** **** ** essential ******* ** some ******* First the growing ****** ** ******** incidents ******** the increasing number ** varying ********* ************ the incidences Third the ******** *********** *** **** ********* with *** protection *** ******** ** ************ Infer ** *** evolution ** ******* **** *** last ****** **** ************* **** *** ************* **** *** **** ******* saw *** rise ** ******* *** computing ******* ******** ************ ** ** ********* ** ***** ******* ** *** universal *********** ********** ** ** 2015) ** ** ******* that even ***** ******* of work ** *** ******** ** ********** almost *** ******* ***** *** ***** ********** ** attack *** **** ****** ********* ** **** ******** ******** ** ****** ** *** ** *** *********** to handle *** ******** ******* find ** **** ** set up and ***** *** ****** **** ****** ******* they ****** **** do *** ******* adequate ******** To **** *** the ** systems **** confirmed that they *** **** **** ******* which ******** *** only ****** **** compensating ********** * user ***** there *** **** ****** ****** to *** ******** ** ******** business *** government ******* ***** protection ***** ** **** ******** ******** *** firewalls *** ineffective ******** ******** **** as ******** ************** Also ** advanced ******** ********* **** ** ******** ************** *** ********** ** *** ** **** ** ** ***** ******** as ***** ******** is revealed via ****** **** ** ******* ** *** *** *** ****** ********** ** ** 2015) Vendors have ******* the *********** ********** abilities to ***** them ** ************ accesses ** ******* *** **** ** them ****** ********* the ********* ************ ** provide ******** ********** For *** ********* **** many international ********* the **** legislation ****** ********* to *** ******** model ******* ********* *** ********** attack ******* in *** **** ****** ******** of *** network *********** is ***** *** ******** ** **** systems ***** consequence ** possible ****** *** ************* *********** ** **** ******* facilities ** services ** ********* **** less ********* ** hiring policies and ******** *************** ************** environment *********** ********** and ******** activities are **** **** changed in *** internet Organizations such ** **** **** been penetrated *** **** were ****** (Donaldson ** ** ***** **** ****** ******** ****** *** the ********* of the ********* *** being ********* ** the last half ****** ***** IT *** ******* **** ****** ********** ** * characteristic ** society cyberspace *** **** of availability *********** and quality **** was ********** associated **** water *** ***** utilities are *** ********* *** the technology used ** ******* ********** *** government services ******* ** the cyber ****** Predict the evolution ** ********** ************ ********* risk ********** processes and ******* effective ********** program ** identified ** *** procession to ****** *** ** ** ** ** **** be **** to discover **** and adopt changes ** *** ********** or business ** identify the ********* of interest ******* ***** **** ** must ******** *** **** ******* and *** **** ********** *** respond ** ******* ** *** regulatory and ********* ****** * ******* ****** **** ** ***** *********** into ********** ** *** ******** ** **** ** **** which **** ******* *** ** *** ** the **** ************* ********* ******** and *********** *** tightening ***** ******** on those in ****** of protecting privacy *** **** ******** ** retort ************* *** ******** **** ** ***** ***** such as ****** feeds *********** ***** *** ************* ******** Other ******** *** ********** ** ******** ***** ********** ********** *** ************ their ******** ******* **** practices *********** *********** ***** ******** *** risks *** proceeding ****** to ******** **** **** ****** ** ******* ***** on *** ********* and consumers ** *** ************ ** *** organizations ****** their ********* ** compliance *** operational ***** **** **** ****** learn *** customers *** ********* *** ** ***** risks Currently ****** ******** ** aware ** the **** ****** tale **** *** *********** *** *** ****** at ****** ******* ***** ** ** sensible **** ******** ********* *** influence *** quality ** ***** ************ ***** ********* can ****** ** ************ *** ********** vulnerabilities *** ******* For ******* ***** and ******** ******* ********* *** ******* analyzing *** customers ** ***** *********** ** ******** ******* ***** and ******* ********* ** consumers ********** ******* actions *** *** webIn ********** *** ******** incident response **** ****** instructions ** potential events **** ** ******* and ***** ********* ******** ******** and **** breaches From ***** it is evident that *** **** ********** ******** ******** *** ***** **** responsibilities *** ***** processes and ********** for ** ********** ******* Also Implementation ** **** ********** should ** ** a proactive ****** **** reactive as ** *** ****** *** *********** ***** ** progress To **** *** ** ********* *********** ********** ******** ******* ***** * ******** ******** ******** *************************** * Aslam * ******** C * ***** ****** * **************** ************** how to ***** * ********** ************ program against ******** ******* ************ * ****** ********** *** RISK ****************** *** ********* **** Facility: ********* ********** ** ********* ******* **** ********* R ******* A Mundie * Householder * * ****** * ***** **** * * ****** ******** security ******** response **** growth *** ************* ******** ***** Privacy12(5) *********
