Question Details

[solution] » For this exercise, read the provided case study about AcmeHealth,

Brief item decscription

Step-by-step solution file


Item details:

For this exercise, read the provided case study about AcmeHealth,
More:

For this exercise, read the provided case study about AcmeHealth, and rate the risk exposure for each finding related to the following assets:

  1. Code Repository
  2. QA Server
  3. Production Application Server

You will need to assess the severity of each violation and also the likelihood that it would cause a breach of security. Use the severity and likelihood scales from Appendix B in the book (Tables 6.11 and 6.12) to evaluate each finding. A mapping table is provided (Figure 6.2) to calculate the Risk Exposure value for each severity/likelihood pair without taking sensitivity into account for now. Along with the ratings, describe in words why you rated the severity and likelihood this way. Review the provided example as a guideline.

Next, write down 3-5 questions for each finding that you might ask the resource owner or SME to further qualify the risk. If you don?t understand the technical details of any of the findings, ask the instructor to clarify.


Assignment

 

For this exercise, read the provided case study about AcmeHealth, and rate the risk exposure for each finding

 

related to the following assets:

 

1. Code Repository 2. QA Server 3. Production Application Server You will need to assess the severity of each violation and also the likelihood that it would cause a breach of

 

security. Use the severity and likelihood scales from Appendix B in the book (Tables 6.11 and 6.12) to evaluate

 

each finding. A mapping table is provided (Figure 6.2) to calculate the Risk Exposure value for each

 

severity/likelihood pair without taking sensitivity into account for now. Along with the ratings, describe in words

 

why you rated the severity and likelihood this way. Review the provided example as a guideline.

 

Next, write down 3-5 questions for each finding that you might ask the resource owner or SME to further qualify

 

the risk. If you don?t understand the technical details of any of the findings, ask the instructor to clarify.

 

You can turn in the assignment electronically through Blackboard. Use this worksheet to capture each critical asset and describe the business value (see examples in the first

 

row below): # 1 Resource Code Repository Finding Severity Likelihood Exposure Resource administrators don?t verify the integrity

 

of the information resource patches through such

 

means as comparisons of cryptographic hashes to

 

ensure the patch obtained is the correct, unaltered

 

patch. High Low Moderate If malicious code is allowed onto the system through an application patch, this could compromise that

 

application potentially allowing backdoor access to attackers or allow sensitive data to be sent from

 

the application to the attackers. The malicious code may also cause the application to be unstable,

 

causing it to crash periodically.

 

Although it is possible for attackers to place fake application patch updates on sites that look

 

legitimate, for most commercial software this would be more difficult and the attacker would have to

 

be very motivated and have a high level of skill.

 

Network connections from the offshore developers?

 

workstations to the code repository server are not

 

encrypted. 2 Code Repository _______ _______ _______ ____________________________________________________________________________

 

____________________________________________________________________________

 

____________________________________________________________________________

 

Client data is copied from production servers to this

 

server regularly for QA testing. 3 QA Server _______ _______ _______ ____________________________________________________________________________

 

____________________________________________________________________________

 

____________________________________________________________________________

 

No one notifies the Help Desk of terminations for

 

support personnel in order to ensure that their

 

access is disabled. 4 Production

 

Application

 

Server _______ _______ _______ ____________________________________________________________________________

 

____________________________________________________________________________

 

____________________________________________________________________________

 

Table 1 ? Initial Finding Ratings Next write down your follow up questions for each finding using the space provided below. These questions

 

should include the information you would need to better rate each of the findings:

 

Finding 1: Are updates tested in a non-production environment prior to implementation? Where are updates downloaded from? Are systems scanned for vulnerabilities post-update? Will the system install a corrupted update? Is there a back-out procedure for bad updates? Etc.

 

Record your follow up questions to further qualify each finding here:

 

Finding 2: ________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________ Finding 3: ________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________ Finding 4: ________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 

_________________________________________________________________________________________

 







About this question:
STATUS
Answered
QUALITY
Approved
ANSWER RATING

This question was answered on: Feb 21, 2020

PRICE: $24

Solution~00065995848.zip (18.37 KB)

Buy this answer for only: $24

This attachment is locked

We have a ready expert answer for this paper which you can use for in-depth understanding, research editing or paraphrasing. You can buy it or order for a fresh, original and plagiarism-free copy (Deadline assured. Flexible pricing. TurnItIn Report provided)

Pay using PayPal (No PayPal account Required) or your credit card. All your purchases are securely protected by PayPal.
SiteLock

Need a similar solution fast, written anew from scratch? Place your own custom order

We have top-notch tutors who can help you with your essay at a reasonable cost and then you can simply use that essay as a template to build your own arguments. This we believe is a better way of understanding a problem and makes use of the efficiency of time of the student. New solution orders are original solutions and precise to your writing instruction requirements. Place a New Order using the button below.

Order Now