issc331 assignment 1

Assignment Instructions

Instructions: Do Exercise 1 or Exercise 2 below, but not both.

Exercise 1: Executive Summary on Risk Analysis

Learning Objectives and Outcomes

Describe common concepts in information security, privacy and the law. You will learn how to present and justify risk analysis for assets in an organizational setting and will relate those findings to the basic security principles of confidentiality, integrity, and availability.

Assignment Requirements

Refer to the case scenario that was provided to you in Lab 1. By now, you will have created the comprehensive asset list in order of importance of each asset. For this assignment, you need to create an executive summary that explains your list. This executive summary will be presented to the school’s board of directors.

Much of the information you have analyzed will be technical in nature. First, without creating a full executive summary of the operation, summarize your findings in a simple bullet-point list. Then, assign a quantitative value to each asset by examining its numerical, measurable characteristics such as original cost, cost of replacement, loss of teaching skills or created information, school image and reputation.

This will allow you to organize your priorities, and be able to use that information to prepare a full executive summary for presentation to the school’s board of directors.

Exercise 2: Executive Summary on Veterans Affairs (VA) and Loss of Private Information

Learning Objectives and Outcomes

Review the case on loss of personal information and be able to make conclusions based on your findings on the VA case and loss of private information.

Assignment Requirements

Refer to the case scenario provided in this lesson’s Lab. By now, you have analyzed the case study and have suggested possible mitigating remedies to prevent loss of private information. Write an executive summary that supports your list of suggested remedies.

Much of the information you have analyzed will be technical in nature. First, without creating a full executive summary of the operation, summarize your findings in a simple bullet-point list. This will help to prioritize the remedies suggested. Once you have the summary ready, compile your findings in the form of an executive summary. The main points you need to cover are:

Analyze the mistakes committed by both the employees and the Veterans Affairs Administration that led to data loss.
Ensure that the remedies you suggest prevent the mistakes you analyzed from reoccurring in the future. You can think of using encryption as one of the possible remedies. In this case, describe how encryption can be used.
Explain methods that will ensure proper monitoring and enforcement of the existing security policies.

Submission Instructions:

Submit your answer in a Microsoft Word document in not more than 300 words.

Font: Arial 10 point size

Line Spacing: Double

Grading Criteria

1. Content 50%

2. Writing Conventions (Grammar and Mechanics)10%

3. Organization of Ideas/Format 300 Words 30%

4. Source (APA Format) 10%