Reference no: EM13325141
Description of the function and boundaries of the about theHospital, Inc. InfoSec Training Program system.
Instructions
The objective of a Risk Analysis (aka Certification and Accreditation -C&A) of an Information System is o demonstrate to the accrediting authority that everything possible has been accomplished to reduce risk to the IT system to an acceptable level. To do this, an information security specialist (or team) would conduct a complete risk analysis of the system to include vulnerabilities, threats, controls for mitigation, measurements, and any regulatory or policy requirements (governance) for the system.For this assignment, you are to conduct a risk assessment and document it in a certification package to be presented to the accreditation authority (AA) that the system is acceptable to operate in theOrganization network. Using the information from projects that you have done in this class create C&A packages normally include:
1. Cover Page
2. Executive summary describing the system
3. Description of the function and boundaries of the system
4. An extensive review of the vulnerabilities, threats, and threat sources
5. Annual Loss Expectancy (ALE) for each item in 4
6. Identification of mediating controls for each item in 4
7. Description of appropriate effectiveness measurements for each item in 6
8. Plan of Action and Milestones (POAMs) for any unmediated threat
9. A summary statement making a recommendation to the AA to authorize the system tooperate (or not).
10. A power point presentation you would use to brief the AA about the informationsecurity posture of the system.
In the end, your C&A package will provide proof that your organization exercised due diligence towardprotecting its information assets. You must demonstrate that the system security meets are regulatoryand policy requirements and that any controls in place have mitigated the risk of operating the systemhas been reduced to an acceptable level (or not).
Note: NIST SP 800-37, Rev 1 provides an outline of the entire C&A process. Also use NIST 800-53R3.
|
Compute the direction of the electric field
: 10-nC point charge is located at the center of a thin spherical shell of radius 8.0 cm carrying -20 nC distributed uniformly over its surface. What is the magnitude of the electric field 2.0 cm from the point charge
|
|
Find out the ph of nh3 solution
: Determine the pH of (a) a 0.20 M NH3 solution, (b) a solution that is 0.20 M in NH3 and 0.30 M NH4Cl
|
|
Contrast their management styles and philosophies
: Entrepreneurship has clearly transformed the world economy. Choose three successful entrepreneurs, and use research to compare and contrast their management styles and philosophies. Feel free to use local entrepreneurs—or even family members. If you ..
|
|
Motivation method factor in their overall leadership theory
: What are some of the best methods when motivating assignees and why are those methods successful? How does a company have selected motivation method factor into their overall leadership theory?
|
|
Description of the function and boundaries of the system
: Description of the function and boundaries of the about theHospital, Inc. InfoSec Training Program system.
|
|
Identify an industry that the internet has transformed
: Identify an industry that the Internet has transformed or destroyed. Then think of a new industry that the Internet has created. What are the reasons behind the changes? How do you anticipate that technology will transform business in the future?
|
|
Define kilocalories and kilojoules rather then calories
: We most often express heat as kilocalories and kilojoules rather then calories and joules. When 1 pound of fat is burned in the body,9.4 kilocalories of energy is produced. Express that as a) calories b)kilojoules
|
|
Purpose of the business in terms of the product
: Surveys have consistently shown 60% of Americans would like to start their own business, but not nearly as many act on this desire. One of the first things a person who is serious about moving forward on this notion should do is think critically abou..
|
|
Define what volumes of 0.150 m acetic acid
: What volumes of 0.150 M acetic acid and 0.065 M NaOH solutions must be mixed to prepare 1.00L of a buffer solution of pH 4.50 at 25C.(Show all work for 5 stars)
|