Reference no: EM132368156

IS Security and Risk Management Assignment -

Assessment 1: Case study

Assessment Details: The risk to organizations from a network attack has increased exponentially. Threats can occur at any point on the internet where there is a potential weakness that hackers can exploit using different types malware. As the number of devices grows, the potential for attack and disruption increases.

Assume you are working as an IT security consultant at the IT department of ITech company. The company uses data centres to store very important customer data. As an IT consultant, you have to advice the staff about the ransomware attack, their types and threats. In this context write a report including the following sections:

1. Introduction about ransomware attack and their impacts on the society.

2. Discussion of any three recent variants of ransomware attacks.

3. The working mechanism of ransomware.

4. Potential threats posed by ransomware.

5. Summary

6. References in Harvard style.

Assessment 2: Applied Project

Assessment Details: This assessment is designed to assess your technical skills in investigation IS security, risk threats and management to an organization. The assessment is also assessing your skills to evaluate risk management techniques and IS auditing. You are required to select an organization that uses information systems to perform daily business operations. You have to identify the most valuable assets for the organisations and investigate the security threats and mitigation techniques. You have also to propose/evaluate the risk management techniques adopted by the selected organization to ensure the reliability, confidentiality, availability, and integrity. You have also to discuss audit plan and processes used by the organization and investigate the impact of human factors on security and risk management.

Task Specifications - This assessment includes two tasks as follows:

Task-1: Each group should select an organisation. The organization must provide information systems services to the staff and customers. You have to write a report to answer the followings related to the selected organization:

1. Network devices are highly vulnerable and can be exposed. Discuss two types of threats against network routers/switches of the selected organization. Illustrate how these devices are vulnerable to destruction and abuse.

2. Propose with justification two types of network security devices can be used to control security and mitigate threats related to the web and email servers.

3. Assume the organization used Windows server 2016 to host the organization web site. Discuss how the organization can ensure the availability of the web service using windows server 2016.

4. Discuss the impact of employee on information security of the selected organization. Provide risk management recommendation to reduce the risk of employee.

5. Windows server 2016 supported with different tools for auditing. Illustrate windows server 2016 auditing tools and discuss how they can be used by the selected organization to monitor and analyzing the web server and email server problems.

You may need to make some assumptions with the required justifications. Please note you have to use Harvard reference style.

Task 2: Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video. Use Steghide tool available in Kali Linux to hide a text file that includes the group students names and IDs on APIC logo image (Use: SBM4304 as passphrase). In your report, you have to provide screenshot demonstrate the steps you followed during the process of installation of Steghide, and the way you use to hiding group information text file into APIC logo image and finally the steps to extract the text file from APIC logo image for verification of your work.

Submission - You have to submit two files:

1. Report in word format for Task-1 and Task-2 processes.

2. APIC logo image that includes your group information for Task-2.  The two files must be submitted separately not in single compress file.

Note - In that assessment 2 applied project need to make logo of college you can get from website of college. In this section task 2 just need the screen shot being posted and procedures of steganography and need the files of task 2 those Linux files and process where you will be using logo or image of APCI college inside the logo there need our group members name and id and need the file of vmware kali linux.

Attachment:- IS Security and Risk Management Assignment File.rar