Reference no: EM133432881 , Length: Words Count:1400

Assignment:

Question 1

1. Develop a three-level classification system for your email communications. Consider the type of emails you send and receive. Take into consideration who should be able to view, save, print, or forward your email. For each classification, decide how you will label your emails to communicate the assigned classification. For each classification, develop handling standards.
2. Multiple information systems are used to process, transmit, store, and back up email. Identify as many systems as possible involved in each step. For each system identified, document the person or position you would expect to be the information system owner. Is it necessary to provide them with a copy of your classification system or handling standards? Why or why not?
3. Sometimes information system owners have different priorities. For example, your Internet service provider (ISP) by law has the right to view/open all documents that are stored on or passed through its systems. The ISP may choose to exercise this right by scanning for viruses or checking for illegal content. Suppose you have sent emails that could cause you harm if they were disclosed or compromised. As the information owner, what are your options?

Five hundred word minimum not more than seven hundred.

Question 2.

• Explain how the NIST Cybersecurity Framework Core is aimed to structure a list of activities to reach certain cybersecurity outcomes and include examples of guidance to achieve such outcomes.
• Explain which parts can be used as guidance to generate an incident response program and practice.
• Explore the informative references in each category. Do you find any that overlap? Did you find any that contradict each other?

Five hundred word minimum not more than seven hundred.