Reference no: EM133500160

Question 1• Identify and provide a brief explanation of the tools the company is using, the benefits and shortcomings of those tools, and the gaps within the network.

Question 2• Explain in your security report what tactics, techniques, and procedures you would use to understand the network.

Question 3• Identify firewalls, DMZ(s), other network systems, and the status of those devices.

Question 4: Bring Your Own Device Policy
• Assess any existing policies for wireless capabilities and the bring your own device (BYOD) posture within both companies.
• Within the report, explain the media company's current stance on wireless devices and BYOD policy.
• Noting that the company being acquired does not have a BYOD policy,explain to the acquisition managers what needs to be done for the new company to meet the goals of the BYOD policy.

Question 5: Data Protection Plan
• Discuss the benefits of defense measures such as full disk encryption, e.g., BitLocker.
• Discuss platform identity keys as well as the required implementation activities.
• Convey to your leadership the importance of system integrity and an overall trusted computing base, environment, and support.
• Describe what this would entail and include Trusted Platform Module (TPM) components and drivers.
• Mention how are these mechanisms employed in an authentication and authorization system and whether the merging company has this.

Question 6: Review Supply Chain Risk
• Explain to leadership that acquiring a new company also means inheriting the risks associated with its supply chain and those firm's systems and technologies.
• Examine the risks to the supply chain and include in the report the supply chain risks
• List the security measures in place to mitigate the supply chain risks.
• Use the NIST Special Publication 800-161, Supply Chain Risk Management Practices for Federal Information Systems and Organizations, to explain the areas that need to be addressed.