ScenarioThe HIT Innovation Steering Committee within an .docx

•Download as DOCX, PDF•

0 likes•3 views

Scenario The HIT Innovation Steering Committee within an organization is proactively looking at data breaches of other organizations to assist them with minimizing the risk to their data security and privacy. As an intern at this organization, you are to investigate and select a recently publicized data breach. Use information from the module readings, lectures and your own research. Create a Proposal for this Committee describing the identified data breach and strategies the organization can use to minimize security and privacy risks. Instructions Create a written Proposal that includes: Description of the data breach (see attached file), including outcomes for the affected organization(e.g., regulatory and financial) Discussion of the security, privacy, confidentiality, and ethical issues resulting from this breach A final proposal discussion that describes methods that can be implemented in an organization to minimize risk for a data and security breach Reference page of resources utilized Please see Rubric below: A - 4 - Mastery Clear and thorough description of the data breach and outcomes for the affected organization, including multiple examples and supporting details. A - 4 - Mastery Comprehensive discussion of the security, privacy, confidentiality, and ethical issues resulting from this breach, including "multiple examples and supporting details". A - 4 - Mastery Clear and thorough final proposal discussion that "describes methods" that can be implemented in an organization to "minimize risk for a data and security breach", "including multiple examples" and "supporting details". A - 4 - Mastery Reference page contains almost no formatting errors and all sources are scholarly and academi .

Education

Please see Rubric below:
A - 4 - Mastery
Clear and thorough description of the data breach and outcomes
for the affected organization, including multiple examples and
supporting details.
A - 4 - Mastery
Comprehensive discussion of the security, privacy,
confidentiality, and ethical issues resulting from this breach,
including "multiple examples and supporting details".
A - 4 - Mastery
Clear and thorough final proposal discussion that "describes
methods" that can be implemented in an organization to
"minimize risk for a data and security breach", "including
multiple examples" and "supporting details".
A - 4 - Mastery
Reference page contains almost no formatting errors and all
sources are scholarly and academi

The HIT Innovation Steering Committee is looking to minimize data security and privacy risks. As an intern, you are asked to research and propose a recent data breach case study, describing the breach outcomes, privacy issues involved, and recommendations for the organization to reduce future risks. The proposal must include a thorough description of the breach, discussion of resulting security and privacy issues, and proposed risk reduction methods with examples and citations.

CompetencyExamine regulatory and ethical issues related to the u.docx

richardnorman90310

Competency Examine regulatory and ethical issues related to the use and management of health information technology. Scenario The HIT Innovation Steering Committee within an organization is proactively looking at data breaches of other organizations to assist them with minimizing the risk to their data security and privacy. As an intern at this organization, you are to investigate and select a recently publicized data breach. Use information from the module readings, lectures and your own research. Create a Proposal for this Committee describing the identified data breach and strategies the organization can use to minimize security and privacy risks. Instructions Create a written Proposal that includes: Description of the data breach, including outcomes for the affected organization (e.g., regulatory and financial) Discussion of the security, privacy, confidentiality, and ethical issues resulting from this breach A final proposal discussion that describes methods that can be implemented in an organization to minimize risk for a data and security breach Reference page of resources utilized .

Objective Apply decision making frameworks to IT-related ethica.docx

juliennehar

The document provides instructions for a project assignment on applying decision making frameworks to IT ethical issues. Students must write a report of at least 1000 words that describes a current IT ethical issue, applies one of four decision making approaches (virtue ethics, utilitarian, fairness, or common good) using a seven step process, considers the impact, and provides a rationale for their chosen approach. The document lists 21 potential ethical issues students may choose to address and write about.

Paper Ba matrix mapping of a key IT-related organizational .docx

loganta

Paper B: a matrix mapping of a key IT-related organizational (or personal) ethical issue concerning privacy and organizational policy designed to correct the ethical issue. The first step of this assignment is an opportunity to analyze a key IT-related organizational (or personal, if you are not in the job force) ethical issue, related to privacy, subject to relevant laws, regulations, and policies . Both of the following sites provide sources, and an excellent backdrop for issues relating to privacy protection and the law. See EPIC Privacy Issues at: http://epic.org/privacy/ See List on left and/or: EFF Privacy at https://www.eff.org/issues/privacy [see list below in center on this page]. This includes sub-topics discussing information privacy, privacy laws, applications and court rulings (case law is usually an extension of the basic law based on the facts from specific cases and real-world court decisions), and key privacy and anonymity issues. While the sites provide many interesting topics, be sure to focus on our class IT topics. Use the template below and the list of suggested workforce privacy topics from one of the sites above to produce a matrix to map a key organizational ethical (or personal, if not in the job force) issue and how this issue is affected by laws, regulations, and policies. Use the list of normative ethics below to help you complete the matrix. Choose any three (only three) of the following list of twelve (12) principles of normative ethics described below. Prepare the Ethical Issue matrix (single-space in the cells) and include the following explanation (200 words) —double-space your narrative—below the matrix: Why I chose the dilemma; Why I chose the three principles; and An analysis of the research used to identify the actions in the matrix. The completed matrix allows you to weigh the different issues involved and assign a rank as to the importance of the actions based on the effect on the stakeholders. Indicate appropriate APA in-text and source citations for all sources. In addition to critical thinking and analysis skills, your assignment should reflect appropriate grammar and spelling, good organization, and proper business-writing style. Normative Ethics List Autonomy: is the duty to maximize the individual's right to make his or her own decisions. Beneficence: is the duty to do good both individually and for all. Confidentiality: is the duty to respect privacy of information and action. Equality: is the duty to view all people as moral equals. Finality: is the duty to take action that may override the demands of law, religion, and social customs. Justice: is the duty to treat all fairly, distributing the risks and benefits equally. Non-maleficence : is the duty to cause no harm, both individually and for all. Understanding/Tolerance: is the duty to understand and to accept another viewpoint if reason dictates doing so is warranted. Publicity: .

The first step of this assignment is an opportunity to analyze a.docx

rhetttrevannion

The first step of this assignment is an opportunity to analyze a key IT-related organizational (or personal, if you are not in the job force) ethical issue, related to privacy, subject to relevant laws, regulations, and policies . Both of the following sites provide sources, and an excellent backdrop for issues relating to privacy protection and the law. See EPIC Privacy Issues at: http://epic.org/privacy/ See List on left and/or: EFF Privacy at https://www.eff.org/issues/privacy [see list below in center on this page]. This includes sub-topics discussing information privacy, privacy laws, applications and court rulings (case law is usually an extension of the basic law based on the facts from specific cases and real-world court decisions), and key privacy and anonymity issues. While the sites provide many interesting topics, be sure to focus on our class IT topics. Use the template below and the list of suggested workforce privacy topics from one of the sites above to produce a matrix to map a key organizational ethical (or personal, if not in the job force) issue and how this issue is affected by laws, regulations, and policies. Use the list of normative ethics below to help you complete the matrix. Choose any three (only three) of the following list of twelve (12) principles of normative ethics described below. Prepare the Ethical Issue matrix (single-space in the cells) and include the following explanation (200 words) —double-space your narrative—below the matrix: Why I chose the dilemma; Why I chose the three principles; and An analysis of the research used to identify the actions in the matrix. The completed matrix allows you to weigh the different issues involved and assign a rank as to the importance of the actions based on the effect on the stakeholders. Indicate appropriate APA in-text and source citations for all sources. In addition to critical thinking and analysis skills, your assignment should reflect appropriate grammar and spelling, good organization, and proper business-writing style. Normative Ethics List Autonomy: is the duty to maximize the individual's right to make his or her own decisions. Beneficence: is the duty to do good both individually and for all. Confidentiality: is the duty to respect privacy of information and action. Equality: is the duty to view all people as moral equals. Finality: is the duty to take action that may override the demands of law, religion, and social customs. Justice: is the duty to treat all fairly, distributing the risks and benefits equally. Non-maleficence : is the duty to cause no harm, both individually and for all. Understanding/Tolerance: is the duty to understand and to accept another viewpoint if reason dictates doing so is warranted. Publicity: is the duty to take actions based on ethical standards that must be known and recognized by all who are involved. Respect for persons: is the duty to honor others, their righ.

Assignment ContentEthically questionable or unacceptable u.docx

williejgrant41084

Assignment Content Ethically questionable or unacceptable use of information technology includes individuals who hack into others’ systems and steal information, organizations that collect and use information without checking its validity or their right to use it, and employees who destroy or steal proprietary information. Research an organization that recently experienced an IT-related ethics breach. (Your team could also come up with a scenario of a breach based on instructor assigned topics.) Imagine your team has been brought in as consultants to analyze and explain the consequences of the breach to the stakeholders of the company. Your team should suggest ethical practices going forward to reduce the possibility of a breach like this occurring in the future. Create an 8- to 10-slide Microsoft® PowerPoint® presentation that your team will present to the stakeholders of the company. In your presentation, ensure you: Explain why this was an ethical breach. Explain the organizational losses in terms of money, employees, customers, and reputation. Propose ethical practices that the organization should follow in the future to guard against a similar breach. Include any environmental, socioeconomic, political, legal, and global trade factors in your recommendation. Include robust speaker notes on each content slide to demonstrate how you would present the information on the slide. Include a minimum of 2 sources to support your recommendations. Format your citations according to APA guidelines. Submit your assignment. Wk 2 Team - Ethics in IT [due Mon] Goals & standards Aligned with assessment (1) 2.2 2.2 Clarify ethical practices in terms of information security, taking into account environmental, socioeconomic, political, legal, and global trade factors. Goal Set & Category BSA_500Course Objective .

Assignment ContentEthically questionable or unacceptable u

evontdcichon

Term Paper The Rookie Chief Information Security OfficerThis assi.docx

jacqueliner9

Term Paper: The Rookie Chief Information Security Officer This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should contain qualifying criteria of potential v.

ISE 510 Final Project Guidelines and Rubric Overview The final project for this course is the creation of a security breach analysis and recommendations. The relevance of risk assessment cannot be overemphasized as organizations establish or reaffirm their security posture, especially in the wake of overwhelming computer security breaches at many organizations in the United States and around the world, including government agencies. Organizations seek to understand their compliance status for current regulations as well as their vulnerability in order to adopt a proper approach to manage risks. It is equally important to conduct a risk assessment after a system breach has occurred to better understand the threats and the vulnerabilities exploited. For your final project, you will analyze an information security breach that has already occurred. This will place you in the role of a risk assessment expert, coming in to determine how the breach occurred and develop strategies to mitigate against the breach reoccurring. Risk assessment experts can fill the positions of penetration testers, information security auditors, and independent verification and validation analysts, for example. Such roles will continue to gain relevance as organizations and governments continue to move sensitive financial information, personal health information (PHI), and personally identifiable information (PII) across publicly accessible networks and storage devices. For the final project for this course, you will analyze an information security breach provided in the Final Project Scenario document and the educational video game (Agent Surefire: InfoSec) you will play in Module Three. In your analysis, you will discuss how the breach occurred, the incident response processes that were initiated, the impact of the breach, and applicable regulations to the organization. Then, you will develop a security test plan for the breached system and create security controls to ensure that the breach will not reoccur. The project is divided into three milestones, which will be submitted at various points throughout the course to scaffold learning and ensure quality final submissions. These milestones will be submitted in Modules Three, Five, and Seven. The final product will be submitted in Module Nine. This assessment addresses the following course outcomes:  Determine how cybersecurity attacks occur in organizations through analysis of security breaches  Evaluate incident response processes for their effectiveness in ensuring business continuity in support of organizational goals  Assess the impact of cybersecurity regulations on the information security of organizations  Create security test plans for networks, applications, or physical security assessment projects based on established cybersecurity standards  Develop risk mitigation strategies for addressing application, website, and network vulnerabilities  Recommend methods to reduce the impact of org ...

Term Paper The Rookie Chief Information Security OfficerD

alehosickg3

Term Paper: The Rookie Chief Information Security Officer Due Week 10 and worth 200 points This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. T ...

This assignment consists of five (5) parts Part 1 Organi.docx

gasciognecaren

This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write a 14 page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should contain qualifying criteria of potential vendors and the responsibilities of the vendor once the ...

The Rookie Chief Information Security OfficerWorth 200 poi

jacvzpline

The Rookie Chief Information Security Officer Worth 200 points This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should contain q ...

ethical issue.docx

write4

The document describes an assignment to analyze an IT-related ethical issue using a structured decision-making framework. It provides examples of potential issues like privacy on the web, personal data privacy regulations, computer-based crimes, government surveillance of the internet, the digital divide, and privacy in the workplace. Students are asked to construct a scenario, define a problem statement, analyze the problem using steps from a framework like Kidder's, discuss the impact of decisions, and cite an ethical theory to support their decision.

The Rookie Chief Information Security OfficerDue Week 10 and w.docx

teresehearn

The Rookie Chief Information Security Officer Due Week 10 and worth 200 points This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should ...

Term Paper The Rookie Chief Information Security Officer.docx

manningchassidy

CMGT 582 STUDY Inspiring Innovation--cmgt582study.com

KeatonJennings98

The document provides instructions for an assignment to audit the HR department of an organization. It outlines specific areas to examine, including handling of ethical issues, compliance with privacy laws, security policies and training, and security risks. It describes including audit steps for each area and how the presentation will be graded based on addressing the identification of issues, evaluation of tools to address issues, and criteria to determine if risks are mitigated.

Wk 6 - Security AuditYou are part of a team selected by the Chie.docx

lefrancoishazlett

Wk 6 - Security Audit You are part of a team selected by the Chief Information Officer (CIO) to perform a security audit for one of the companies explored in this course: Vampire Legends (Wk 1) Cruisin’ Fusion (Wks 2–3) Devil’s Canyon (Wks 4–5) Create a 10- to 12-slide presentation (not including the title and reference slides) that shows the results of your security audit based on the following audit process: Potential Risk to be Reviewed: Describe the risk. Example: Viruses and malware can negatively impact the confidentiality, integrity, and availability of organizational data. Regulation and Compliance Issues: Analyze how regulations and compliance issues could impact the organization. Provide a detailed analysis of regulations and compliance issues, beyond the simple explanation in score point two. Regulation and Compliance Resources and Tools: Analyze what resources and/or tools are available to address regulations and compliance issues. Describe the control objective and the specific controls you will evaluate to determine potential risk is mitigated. Please note that typically, there will be more than one control that should be reviewed for a potential risk. Example: Determine whether anti-virus software is in use. Example: Determine whether virus signatures are periodically updated. Example: Determine whether periodic virus scans are performed. Provide a detailed analysis of the resources and/or tools available, beyond the simple explanation in score point two. IT Security – Processes and Methods: Differentiate between the various processes and methods involved in management of IT security resources. Review the various options available to address those processes and methods previously explained, and which ones might be feasible. IT Security – Measures: Analyze the various security measures that could be taken within the organization. Demonstrate a detailed understanding of what the alternatives are to approach security, how much security is needed, different methods to employ, etc. Describe the criteria/measures that you will use to evaluate the adequacy of each area/review step that you review (i.e., what criteria will you use to perform your evaluation/how will you determine that the risk has been mitigated to an acceptable level). Example: 100% of servers and PCs have virus software installed. Example: 100% of the virus software installed is set to automatically update, including virus signatures. Example: 100% of the virus software installed is set to automatically perform a scan at least weekly. Include a 1/2- to 1-page executive summary to support your presentation. Include appropriate references. There are 2 parts. Part 1 is PPT and Part 2 is Executive Summary. .

InstructionsPaper A Application of a decision making framework

lauricesatu

Instructions Paper A: Application of a decision making framework to an IT-related ethical issue. For this assignment, you are given an opportunity to explore and apply a decision making framework to an IT-related ethical issue. A framework provides a methodical and systematic approach for decision making . UMUC Module 2 - Methods of Ethical Analysis (see LEO Content – Readings for week 2) describes three structured frameworks that may be used for ethical analysis, namely Reynolds Seven-Step Approach, Kidder’s Nine Steps, and Spinello’s Seven-Step Process . There are several ways described in UMUC Module 2 to systematically approach an ethical dilemma , and while each of the frameworks described has its merits, each will result in an ethical decision if straightforwardly and honestly applied. In addition, you will want to consider the ethical theories described in Module 1 – Introduction to Theoretical Ethical Frameworks (see LEO Content – Readings for week 1) which help decision makers find the right balance concerning the acceptability of and justification for their actions. A separate write-up of the ethical theory that supports your decision is part of the following requirements. For this paper, the following elements must be addressed: Describe a current IT-related ethical issue : Since this is a paper exercise, not a real-time situation, you may want to construct a brief scenario where this issue comes into play, and thus causes an ethical dilemma. The dilemma may affect you, your family, your job, or your company; or it may be a matter of public policy or law that affects the general populace. See the list below for a list of suggested issues, which may be a source of ethical dilemmas . Define a concise problem statement that is extracted from the above description or scenario. It is best if you define a specific problem caused by the dilemma, that needs a specific ethical decision to be made, that will solve the dilemma . Be aware that if it is a matter of public policy or law, that it may require a regulatory body or congressional approval to take action to implement a solution. Analyze your problem using one of the structured decision-making frameworks chosen from Module 2. Make sure that you identify the decision-making framework utilized. In addition, the steps in the decision-making framework selected must be used as major headings in the Analysis section. Consider and state the impact of the decision that you made on an individual, an organization, stakeholders, customers suppliers, and the environment, as applicable! State and discuss the applicable ethical theory from Module 1 that supports your decision. Concerning your paper: Prepare a minimum 3- 5 page, double-spaced paper and submit it to the LEO Assignments Module as an attached Microsoft Word file. Provide appropriate American Psychological Association (APA) source citations for all sources you use . In addition to critical thinkin ...

The Rookie Chief Information Security OfficerThis assignment c.docx

oreo10

The Rookie Chief Information Security Officer This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment. Write a twelve to fifteen (12-15) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should contain qualifying criteria of potential vendor ...

ISOL 633 Portfolio Assignment 1 ISOL 633 Portfolio Assig

TatianaMajor22

ISOL 633 Portfolio Assignment 1 ISOL 633 Portfolio Assignment (300 pts.) Introduction & Overview This is the ISOL 633 Portfolio Assignment, which is a label that merely reflects that one of the overarching M.S. Information Systems Security degree program’s Learner Outcomes (a/k/a, “PLOs”; see syllabus and below) will be tested in your work. This is a relatively light research and writing project to be done individually unless your Instructor advises you to conduct it in a group environment. Although it is relatively light, for example as compared to a master’s thesis or a dissertation, it is an academic research paper that requires rigor, commitment, and care. In ISOL 633 all your work is focused on obtaining the five Course Objectives (also on the syllabus) and this MSISS PLO: ✓ Program Outcome 3.1- Students determine which laws apply to different types of business environments. A successful Portfolio will unequivocally prove that you have attained the PLO, which is partially why this is not due until the end of the term (see your course dates for details). Also, a successful Portfolio will evince graduate-level written English, and conformity to APA Style guidelines. See the Portfolio Assignment’s rubric for a detailed view about how to learn the most in this process, and how to earn the most in terms of a grade on the work. Requirements Writing Style and Constructive Requirements Through experience it is clear that, for some reason, page length is top-of-mind amongst students’ curiosities. You are required to write at least five substantive pages (excluding Title, Abstract, References, and Appendices) and no more than 10 without approval from your Instructor. If you are familiar with APA Style, which is another requirement, you know that the parenthetical above points to the main components of this Portfolio Assignment: Title Page, Abstract Page, Body, References, and Appendices if needed. As graduate students studying in STEM sciences you must follow APA. There are ample resources in UC’s Library to learn how to conform. Besides the Library, you can get all the help desired from UC’s The Learning Commons and its Writing Center. You have no excuse to fail at these basic style and construction requirements. This is the so-called low-hanging fruit. Experience shows us that far too few of you will heed this seemingly simple direction. Please take advantage of these resources lest your excellent research and analyses never actually gets communicated. Sometimes the mode is as important as the message. See the course materials for links and tons of help in this vein. The Research Challenges Your task is to conduct reliable, valid, scholarly research about one of the following bodies of law, and then discuss your findings and critical thoughts about it. There have been and will be ISOL 633 Portfolio Assignment 2 many areas of information security and privacy laws, so ...

20110310 ARMA Northern CO Strategies and Policies for Social Media

Jesse Wilkins

2009 iapp-the corpprivacydeptmar13-2009

asundaram1

The document discusses the challenges faced by corporate privacy departments and how they can better align with other business functions. It recommends that privacy departments find synergies with information security, product development, legal and other teams. It provides examples of how privacy can collaborate with different departments on tasks like product analysis, incident response and metrics. The document also outlines good practices for privacy programs, such as using recognized frameworks, conducting privacy assessments and demonstrating value through objective metrics.

InstructionsPaper B1 a matrix mapping of a key IT-related organ

lauricesatu

Instructions Paper B1: a matrix mapping of a key IT-related organizational (or personal) ethical issue concerning privacy. This assignment gives you an opportunity to analyze a key IT-related organizational (or personal, if not in the job force) ethical issue, related to privacy subject to relevant laws, regulations, and policies . Both of the following sites provide sources, and an excellent backdrop for issues relating to privacy protection and the law. See EPIC Privacy Issues at: http://epic.org/privacy/ See List on left and/or: EFF Privacy at https://www.eff.org/issues/privacy [see list in center on this page]. This includes sub-topics discussing information privacy, privacy laws, applications and court rulings (case law is usually an extension of the basic law based on the facts from specific cases and real-world court decisions), and key privacy and anonymity issues. While the sites provide many interesting topics, be sure to focus on our class IT topics. Use the template below and the list of suggested workforce privacy topics from one of the sites above to produce a matrix to map a key organizational ethical (or personal, if not in the job force) issue and how this issue is affected by laws, regulations, and policies. Use the list of normative ethics principles below to help you complete the matrix. Choose any three (only three) of the following list of twelve (12) principles of normative ethics described below. Prepare the Ethical Issue matrix and include the following explanation (200 words) —double-space your narrative—below the matrix: Why I chose the dilemma; Why I chose the three principles; and An analysis of the research used to identify the actions in the matrix. The completed matrix allows you to weigh the different issues involved and assign a rank as to the importance of the actions based on the effect on the stakeholders. Submit the matrix for grading to the LEO Assignments Module. Indicate appropriate APA in-text and source citations for all sources. In addition to critical thinking and analysis skills, your assignment should reflect appropriate grammar and spelling, good organization, and proper business-writing style. This assignment is directly related to Paper-B2. The ethical issue identified in this assignment will be used in your Paper B2 Assignment. Paper B2 asks you to write a policy that corrects the ethical issue described in Paper B1. Normative Ethics List Autonomy: is the duty to maximize the individual's right to make his or her own decisions. Beneficence: is the duty to do good both individually and for all. Confidentiality: is the duty to respect privacy of information and action. Equality: is the duty to view all people as moral equals. Finality: is the duty to take action that may override the demands of law, religion, and social customs. Justice: is the duty to treat all fairly, distributing the risks and benefits equally. Non-maleficence : is th ...

Senior Seminar in Business Administration BUS 499Coope.docx

ScenarioThe HIT Innovation Steering Committee within an .docx

Recommended

Recommended

More Related Content

Similar to ScenarioThe HIT Innovation Steering Committee within an .docx

Similar to ScenarioThe HIT Innovation Steering Committee within an .docx (15)

More from WilheminaRossi174

More from WilheminaRossi174 (20)

Recently uploaded

Recently uploaded (20)

ScenarioThe HIT Innovation Steering Committee within an .docx