ISOL 533 Information Security and Risk Management essay solution

ISOL 533 Information Security and Risk Management essay solution

Order ID	53563633773
Type	Essay
Writer Level	Masters
Style	APA
Sources/References	4
Perfect Number of Pages to Order	5-10 Pages

Description/Paper Instructions

ISOL 533 Information Security and Risk Management

ISOL 533 – Information Security and Risk Management Risk MItigation Plan University of the Cumberlands

Executive Summary

This Risk Mitigation Plan is for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors.

Health Network has three main products: HNetExchange, HNetPay, and HNetConnect.

HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics.

HNetPay is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart.

HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites.

critical “1” Risks and short-term remediation

< For each “1” risk, add the Remediation you would put into place to Mitigate/Control that risk. Then, add a Cost-Benefit Analysis to show the estimated cost of the loss versus the cost to control the loss. You will need to think about how you would mitigate/control the risk and what type of cost would be associated with that mitigation. REMOVE THIS Highlighted Text before submitting the paper for grading.>

The risk/threats identified are:

1. Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and others
2. Remediation: <replace this text with how you would remediate this risk >
3. CBA: <replace this text with the CBA you calculated for this risk>
4. Loss or destruction of company information due to insider threats
5. Remediation: <replace this text with how you would remediate this risk >
6. CBA: <replace this text with the CBA you calculated for this risk>

major “2” / Minor “3” Long-term remediation

< For each “2” risk and “3” risk, add the Remediation you would put into place to Mitigate/Control that risk. Then, add a Cost-Benefit Analysis to show the estimated cost of the loss versus the cost to control the loss. You will need to think about how you would mitigate/control the risk and what type of cost would be associated with that mitigation. REMOVE THIS Highlighted Text before submitting the paper for grading. >

1. Loss of company data due to hardware being removed from production systems
2. Remediation: <replace this text with how you would remediate this risk >
3. CBA: <replace this text with the CBA you calculated for this risk>
4. Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops
5. Remediation: <replace this text with how you would remediate this risk >
6. CBA: <replace this text with the CBA you calculated for this risk>

III. Theft of company confidential information due to insider threats.

1. Remediation: <replace this text with how you would remediate this risk >
2. CBA: <replace this text with the CBA you calculated for this risk>
3. Loss of customers or revenue due to changes in regulatory landscape that may impact operations.
4. Remediation: <replace this text with how you would remediate this risk >
5. CBA: <replace this text with the CBA you calculated for this risk>

implementation plan

<Below are the Threats from the Project Scenario expanded to include some Risks and Weaknesses along with Domains and Risk Impacts/Factors..>

R-T-W	Domain Impacted	Risk Impact / Factor
Threat : Hardware being removed from production systems Risk : Loss of company data. Weakness : Access Control procedures do not track location of equipment as it is moved. Hardware may not be protected from hacking if used outside the data center.	System / Application Domain	“2” Major
Threat : Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops Risk : Loss of company information Weakness : Software not loaded on mobile devices to lock system when notified of loss.	Workstation Domain	“2” Major
Threat : Production outages caused by various events, such as natural disasters, change management, unstable software, and others. Risk : Loss of customers. Weakness : UPS systems not active to protect systems from outages.	System / Application Domain	“1” Critical
Threat : Internet threats due to company products being accessible on the Internet Risk : Loss or destruction of company information. Weakness : Firewalls and Intrusion Control systems not active or updated to protect systems from unauthorized access.	LAN-to-WAN Domain Remote Access Domain	“1” Critical
Threat : Insider threats. Risk : Loss of company confidential information. Weakness : Former employers, contractors or other insiders having access to company information; current employers are not managed properly and given access to unauthorized information.	User Doman	“3” Minor
Threat : Changes in regulatory landscape that may impact operations Risk : Loss of customers or revenue. Weakness : Change control processes inadequate to handle changes in regulations.	System / Application Domain	“3” Minor

Table 1 from Risk Assessment Plan

Figure 1

RUBRIC QUALITY OF RESPONSE NO RESPONSE POOR / UNSATISFACTORY SATISFACTORY GOOD EXCELLENT Content (worth a maximum of 50% of the total points) Zero points:  Student failed to submit the final paper. 20 points out of 50:  The essay illustrates poor understanding of the relevant material by failing to address or incorrectly addressing the relevant content; failing to identify or inaccurately explaining/defining key concepts/ideas; ignoring or incorrectly explaining key points/claims and the reasoning behind them; and/or incorrectly or inappropriately using terminology; and elements of the response are lacking. 30 points out of 50:  The essay illustrates a rudimentary understanding of the relevant material by mentioning but not full explaining the relevant content; identifying some of the key concepts/ideas though failing to fully or accurately explain many of them; using terminology, though sometimes inaccurately or inappropriately; and/or incorporating some key claims/points but failing to explain the reasoning behind them or doing so inaccurately.  Elements of the required response may also be lacking. 40 points out of 50:  The essay illustrates solid understanding of the relevant material by correctly addressing most of the relevant content; identifying and explaining most of the key concepts/ideas; using correct terminology; explaining the reasoning behind most of the key points/claims; and/or where necessary or useful, substantiating some points with accurate examples.  The answer is complete. 50 points:  The essay illustrates exemplary understanding of the relevant material by thoroughly and correctly addressing the relevant content; identifying and explaining all of the key concepts/ideas; using correct terminology explaining the reasoning behind key points/claims and substantiating, as necessary/useful, points with several accurate and illuminating examples.  No aspects of the required answer are missing. Use of Sources (worth a maximum of 20% of the total points). Zero points:  Student failed to include citations and/or references. Or the student failed to submit a final paper. 5 out 20 points:  Sources are seldom cited to support statements and/or format of citations are not recognizable as APA 6th Edition format. There are major errors in the formation of the references and citations. And/or there is a major reliance on highly questionable. The Student fails to provide an adequate synthesis of research collected for the paper. 10 out 20 points:  References to scholarly sources are occasionally given; many statements seem unsubstantiated.  Frequent errors in APA 6th Edition format, leaving the reader confused about the source of the information. There are significant errors of the formation in the references and citations. And/or there is a significant use of highly questionable sources. 15 out 20 points:  Credible Scholarly sources are used effectively support claims and are, for the most part, clear and fairly represented.  APA 6th Edition is used with only a few minor errors.  There are minor errors in reference and/or citations. And/or there is some use of questionable sources. 20 points:  Credible scholarly sources are used to give compelling evidence to support claims and are clearly and fairly represented.  APA 6th Edition format is used accurately and consistently. The student uses above the maximum required references in the development of the assignment. Grammar (worth maximum of 20% of total points) Zero points:  Student failed to submit the final paper. 5 points out of 20:  The paper does not communicate ideas/points clearly due to inappropriate use of terminology and vague language; thoughts and sentences are disjointed or incomprehensible; organization lacking; and/or numerous grammatical, spelling/punctuation errors  10 points out 20:  The paper is often unclear and difficult to follow due to some inappropriate terminology and/or vague language; ideas may be fragmented, wandering and/or repetitive; poor organization; and/or some grammatical, spelling, punctuation errors 15 points out of 20:  The paper is mostly clear as a result of appropriate use of terminology and minimal vagueness; no tangents and no repetition; fairly good organization; almost perfect grammar, spelling, punctuation, and word usage. 20 points:  The paper is clear, concise, and a pleasure to read as a result of appropriate and precise use of terminology; total coherence of thoughts and presentation and logical organization; and the essay is error free. Structure of the Paper (worth 10% of total points) Zero points:  Student failed to submit the final paper. 3 points out of 10: Student needs to develop better formatting skills. The paper omits significant structural elements required for and APA 6th edition paper. Formatting of the paper has major flaws. The paper does not conform to APA 6th edition requirements whatsoever. 5 points out of 10: Appearance of final paper demonstrates the student’s limited ability to format the paper. There are significant errors in formatting and/or the total omission of major components of an APA 6th edition paper. They can include the omission of the cover page, abstract, and page numbers. Additionally the page has major formatting issues with spacing or paragraph formation. Font size might not conform to size requirements.  The student also significantly writes too large or too short of and paper 7 points out of 10: Research paper presents an above-average use of formatting skills. The paper has slight errors within the paper. This can include small errors or omissions with the cover page, abstract, page number, and headers. There could be also slight formatting issues with the document spacing or the font Additionally the paper might slightly exceed or undershoot the specific number of required written pages for the assignment. 10 points: Student provides a high-caliber, formatted paper. This includes an APA 6th edition cover page, abstract, page number, headers and is double spaced in 12’ Times Roman Font. Additionally, the paper conforms to the specific number of required written pages and neither goes over or under the specified length of the paper.
GET THIS PROJECT NOW BY CLICKING ON THIS LINK TO PLACE THE ORDER CLICK ON THE LINK HERE:  https://essaysolver.com/orders/ordernow You Can Also Place the Order In www.perfectacademic.com/orders/ordernow / www.essaysolver.com/orders/ordernow
Do You Have Any Other Essay/Assignment/Class Project/Homework Related to this? Click Here Now [CLICK ME] and Have It Done by Our PhD Qualified Writers!!

PLACE THE ORDER WITH US TODAY AND GET A PERFECT SCORE!!!

Do You Have Any Other Essay/Assignment/Class Project/Homework Related to this? Click Here Now [CLICK ME] and Have It Done by Our PhD Qualified Writers!!

Why Work With Us!!

• Tired of getting an average grade in all your school assignments, projects, essays, and homework? Try us today for all your academic schoolwork needs. We are among the most trusted and recognized professional writing services in the market.

• We provide unique, original and plagiarism-free high quality academic, homework, assignments and essay submissions for all our clients. At our company, we capitalize on producing A+ Grades for all our clients and also ensure that you have smooth academic progress in all your school term and semesters.

• High-quality academic submissions, A 100% plagiarism-free submission, Meet even the most urgent deadlines, Provide our services to you at the most competitive rates in the market, Give you free revisions until you meet your desired grades and Provide you with 24/7 customer support service via calls or live chats.