Section 5: Controlling Risk
This final section combines all of the previous sections and gives the opportunity to look at mechanisms to control risk.
Be sure to include an abstract and a References page in your final draft.
The project deliverables for Week 5 are as follows:
Section 5: Controlling Risk
Given the following categories or areas where risk exists, and then the 3 assets for each, describe how you will test for associated risk:
Administrative
Human resources:
Hiring and termination practices
Organizational structure:
A formal security program
Security policies:
Accurate, updated, and known or used
Technical
Access control:
Least privileged
System architecture:
Separated network segments
System configurations:
Default configurations
Physical
Heating and air conditioning:
Proper cooling and humidity
Fire:
Fire suppression
Flood:
Data center location
Once you have described the tests that will be conducted to test each, assume that failure or holes were found in each of them.
Next, describe at least 3 safeguards for each that could be put in place to address the risk.
Name the document "yourname_IT454_Final.doc."
.
Section 5 Controlling RiskThis final section combines all of the .docx
1. Section 5: Controlling Risk
This final section combines all of the previous sections and
gives the opportunity to look at mechanisms to control risk.
Be sure to include an abstract and a References page in your
final draft.
The project deliverables for Week 5 are as follows:
Section 5: Controlling Risk
Given the following categories or areas where risk exists, and
then the 3 assets for each, describe how you will test for
associated risk:
Administrative
Human resources:
Hiring and termination practices
Organizational structure:
A formal security program
Security policies:
Accurate, updated, and known or used
Technical
Access control:
Least privileged
System architecture:
Separated network segments
System configurations:
Default configurations
Physical
Heating and air conditioning:
Proper cooling and humidity
Fire:
Fire suppression
Flood:
Data center location
Once you have described the tests that will be conducted to test
each, assume that failure or holes were found in each of them.
Next, describe at least 3 safeguards for each that could be put in
2. place to address the risk.
Name the document "yourname_IT454_Final.doc."
