Reference no: EM133403323

Assignment:

Before proceeding to Project Submission Steps, read through a breakdown of the corporate struggles of mergers and acquisitions from a cybersecurity perspective, adapted from cybersecurity news site Dark Reading: One of the

Project Submission Steps You are the Cybersecurity Analyst for a large, global hotel chain. Your company is merging with another large chain, and both parties have begun due diligence efforts. You have a solid team that has been together for a few years, and your monitoring and threat hunting processes are fairly mature. You have multiple log servers all over the world that collect logs and then send them to a SIEM for correlation and analysis. Your team also conducts tabletop exercises, phishing campaigns, and security awareness training. You don't know much about the other company's cyber capabilities, but you have been told they are not as mature.

They mostly operate in reactive mode, as opposed to proactive, so they haven't spent much time on process improvement and optimization. They do have some tools installed, but they are point solutions, and there is little consistency in how they are used. Finally, some of their security staff have already left, so there is a knowledge gap. You have been asked to facilitate the effort to merge the two cybersecurity infrastructures. Both companies have a cloud presence, as well as data centers. On the perimeter, your company uses Cisco ASA and Firepower for firewall and IDS/IPS. The other company uses Palo Alto appliances for those functions. They also use Oracle as their ERP system, whereas your company is an SAP shop.

Your task is to write a paper (5 to 6 pages) listing and explaining the challenges to executing this assignment, as well as what needs to be done in order for it to be successful. For example, you might start out by stating that both teams need to get together and make this a formal project, governed by a PMO. Be sure to list the high level steps in order of importance since certain things cannot, and should not, happen before others.