Reference no: EM131186955
IT Auditing and Security Risk Management Unit 1 DB
Please provide information that has been certified as not similar to anything else on the internet or schools. I will not accept anything above 20% similarity according to my school verification. Please respond to my additional questions within 24 hours.
Scenario
Peak View Sound Sources is a public company based in Denver, Colorado and is focused on providing digital media and Web sites to music companies and musicians through the Mountain and West Coast regions. The company has a solid reputation and is starting to get some national and worldwide attention, with new prospective companies wanting to take advantage of the quality services they have seen on other existing Web sites.
Your company has been hired to assist Peak View Sound Sources (PVSS) to ascertain the security posture of the company's Information Systems resources and services. You are heading the team of auditors tasked to perform the audit and assessment.
You enter the company offices of PVSS and begin your analysis of the environment and situation.
Initial analysis has allowed you to determine that the company is made up of the following divisions:
- Corporate Management and Support Staff: This organization contains the executive management, human resources, and accounting teams. All company decisions are directed from the management team.
- Information Technology: This team manages the networks, servers, Web sites, and desktop environments for the company. The team has a perception of being difficult to work with, as they are slow to adopt new technology and slow to implement new offerings. The reality is that the team has resources and wants to uptake the newest and greatest technology, but they spend most of their time putting out fires and reacting to issues.
- Media Content and Design: This team is in charge of working with the record companies and musicians to create the Web Sites and implement the product offerings that are sold.
- Sales and Marketing: This team works with the musicians and record companies to offer and sell the services of PVSS.
There is a concern about the security of the infrastructure with respect to the ability to protect the copyrighted material that PVSS is given to host, because a single incident several years ago took place in which an entire new CD was released prematurely via the Internet. Although PVSS was not directly linked to the leak, there are suspicions surrounding PVSS.
Assignment Deliverables
As you continue your analysis, you see that the Information Technology (IT) department has developed several guidelines and procedures about how various systems should be considered and set up, but this is internal only to the IT department. Every time a new machine is set up and deployed, within a month, the configuration is changed.
- Explain why you think the use of these guidelines and procedures is not sufficient and may not solve the problem. Consider how a company-wide policy program could help the situation.
- As you begin to prepare your game plan to conduct an Information Security Audit, talk about why you think this current situation makes it difficult to identify the controls that need to be examined.
- If you were performing this security audit, with which regulations would you want to ensure that PVSS complies? Why?
|
What ways stakeholders assess organizational effectiveness
: Stakeholders, by the nature of their role, conduct ongoing assessments of the effectiveness of organizations. What are some of the ways stakeholders assess organizational effectiveness? Which of these is most valid? Why? Is there ever a time when ..
|
|
How does the fly defeat the nests formidable defenses
: How does the fly defeat the nest's formidable defenses and avoid detection? It manufactures chemicals to smell like an ant. You might have the impression that network-based intrusion detection tools.
|
|
How would you assess the business risk
: How would you assess the business risk of HIH Insurance Limited?- What conditions need to exist for a negligence action to be upheld?.
|
|
Legal issues in information security and incident response
: Using the online library, the Internet, and all course materials, research cyber criminals, their motives, and the forensic tools used to track an offender.
|
|
It auditing and security risk management unit
: Peak View Sound Sources is a public company based in Denver, Colorado and is focused on providing digital media and Web sites to music companies and musicians through the Mountain and West Coast regions. The company has a solid reputation and is s..
|
|
Scanning for open wireless networks
: Law and ethics are often both considerations when determining the reaction to a computer security incident. For instance, scanning for open wireless networks is not illegal unless the scanner connects to the network without permission. Discuss thi..
|
|
Determine the demand and revenue equations
: If overhead is $2500 per month and the production cost per coat is $2000, find the cost equation and profit equation.
|
|
Article on creating competitive advantage
: Write a two page article on creating competitive advantage via unstructured data?
|
|
Data communication information
: Present an of the origin and of the concept. Describe the use of and toward the concept. Explain the strengths disadvantages) of the concept. Describe the prevailing view of about the likely future of the concept. Research and cite at least six (6..
|