Reference no: EM133520989

Question 1: Security Architecture

Address the following:

• Identify and define all hardware and software devices, and the different types of sensitive data the organization will store.
• Explain the organization's technical requirements in compliance with all devices and services internally and externally that could be a potential target for cyberattacks.
• Describe in-depth how the security controls and services are positioned, and how they relate to the overall systems architecture to prevent attacks.
• Demonstrate restricting access, layering security, employing authentication, encrypting storage, and automating data security by including the full scope of policy, procedural, and technical responsibilities in the IT infrastructure.
• Apply knowledge to effectively manage a security program.
• Assess the effectiveness of a security program.

Question 2: System Design

Address the following:

• Describe the design goals and considerations, and articulate threat modeling, providing a high-level overview of the security architecture.
• Describe the security baselining and the data design associated with the system, and explain the human-machine interface and operational scenarios.
• Design a high-level system diagram that further deconstructs into low-level detailed design specifications for each system component, including hardware, internal communications, software, system integrity controls, and external interfaces, all of which are a part of the program monitoring and control.
• Describe the importance of secure software and the programming practices, development processes, and methodologies that lead to secure software.