{"id":112519,"date":"2022-06-29T00:00:00","date_gmt":"2022-06-29T00:00:00","guid":{"rendered":"https:\/\/nursingstudybay.com\/2022\/06\/29\/assignment-2-defensive-audit-1500-words\/"},"modified":"2022-06-29T00:00:00","modified_gmt":"2022-06-29T00:00:00","slug":"assignment-2-defensive-audit-1500-words","status":"publish","type":"post","link":"https:\/\/www.studyproessays.com\/help\/assignment-2-defensive-audit-1500-words\/","title":{"rendered":"Assignment 2: Defensive Audit (1500 words)"},"content":{"rendered":"

Assignment 2: Defensive Audit (1500 words 30%)
\nDespite the strictest security protocols and measures, every organisation has certain vulnerabilities that can be exploited by hacking attacks. Once these vulnerabilities are identified, cyber security professionals need to be well-equipped to securing them. Occasionally, however, these may not be secured in time. A security consultant also needs to be able to counter the attack with the resources available.
\nThis Assignment 2 requires you think about the multiple ways in which a business or an organisation\u2019s security vulnerabilities can be exploited and you will be required to defend against such attempts so as to disrupt a hacking attack and securing the organisation\u2019s vulnerabilities. 2nd Assignment: Defensive Auditing (1500 words 30 percent )
\nAlthough every organization has specific vulnerabilities that can be exploited by hackers, even those with the tightest security policies and precautions are susceptible to assault. As soon as these vulnerabilities are found, cyber security experts must be well-prepared to take steps to mitigate their impact. On rare occasions, however, these may not be secured in time for the event. In addition, a security consultant must be able to counter an assault with the resources at his or her disposal.
\nYou will be required to consider the various ways in which a business or organization’s security vulnerabilities can be exploited, and you will be expected to defend against such attempts in order to disrupt a hacking attack while also securing the organization’s vulnerabilities in this Assignment 2.
\nInstructions
\nIn this assignment, you will be provided with three context briefs from which you will be required to select any one business or organisation for your analysis and complete the tasks below (A & B). As much as possible, focus on the details provided in the brief. Where information is not provided but integral to your analysis, make reasonable assumptions (which should be clearly stated and explained).
\n1. Vulnerability Analysis (25%)
\n2. Security Plan (75%)
\n1. Vulnerability Analysis
\nYou will be required to assess organisational vulnerabilities for your chosen context, and develop a defence plan to disrupt the hacker\u2019s activities.
\nSelect three organisation vulnerabilities and compare them in terms of:
\n1. Level of potential exposure
\n2. Likelihood of this vulnerability being exploited
\n3. Magnitude of potential impacts
\nPlease note that your three selected vulnerabilities should vary in all the above mentioned characteristics.
\n2. Security Plan
\nBased on your chosen vulnerabilities, propose a security plan that can be implemented by your organisation to reduce exposure. Your security plan should include:
\n1. Focus on the social and organisation elements of ensuring good security, and the trade-offs between security and freedom.
\n2. Suggest 3 approaches this organisation could take to enhance their cybersecurity, and for each approach discuss
\no The resources required to implement this framework
\no Assessment of the effectiveness vs. costs of your proposed security plan
\no Ability of the proposed framework to cover multiple vulnerabilities
\no Implications on the organisation and their core business
\no Trade-offs between security, privacy and freedom
\n3. How does the global environment around hacking improve or complicate your defense plan? Discuss the role of the local and global hacking community. Provide an example of one global organisation that could help you.
\nContext 1: School
\nLocation & environment
\n\u2022 Inner suburb school
\n\u2022 On the outskirts of the city, with both residential and commercial buildings
\n\u2022 Mid to high-density area
\nTechnology
\n\u2022 Password-protected Wi-Fi for students and staff
\n\u2022 3 computer labs with 10 computers and network-connected printers
\n\u2022 Use of personal iPads and laptop computers is allowed for students
\n\u2022 Use of externally hosted learning management system, which also manages grades and enrolment
\n\u2022 Externally hosted email for students (Gmail)
\n\u2022 Externally hosted file sharing (Google Drive)
\n\u2022 Staff files are secured within school firewall and cloud-synchronised on nightly basis
\n\u2022 All files are backed up on the school server every night
\n\u2022 Staff HR system runs on the school server (located on the premises)
\nPeople
\n\u2022 1000 student, from grade 10 to 12
\n\u2022 48 teachers, 9 maintenance staff, 12 casual staff
\n\u2022 All permanent staff require police checks
\n\u2022 Students have given email address with their student ID and the school domain
\n\u2022 Other people engaged with the school include parents, assessment task writing help Australia<\/a> community organisations, government staff and vendors
\nContext 2: Cafe
\nLocation & environment
\n\u2022 Inner suburb cafe
\n\u2022 On the outskirts of the city, with both residential and commercial buildings
\n\u2022 Mid to high-density area
\nTechnology
\n\u2022 Password-protected Wi-Fi for staff and patrons
\n\u2022 iPads used for taking orders, sending orders wirelessly to kitchen, and transmitting to cashier counters
\n\u2022 Externally hosted file sharing for staff (Google Drive)
\n\u2022 Staff HR and POS systems run on the cafe server (located on the premises)
\n\u2022 POS (Point of Sales) system with integrated:
\no Payment technologies
\no Staff rosters
\no Operating hours
\no Hourly sales reports
\n\u2022 All files are backed up on the cafe server every night
\n\u2022 POS system and staff files secured within caf\u00e9 firewall and cloud-synchronised on a nightly basis
\nPeople
\n\u2022 Permanent full-time staff: 3 baristas, 5 waiters, 1 manager
\n\u2022 2 maintenance staff who come in every evening after closing (8 pm)
\n\u2022 All permanent staff require police checks
\n\u2022 Maintenance staff require reference checks with their previous employer(s)
\nContext 3: Hospital
\nLocation & environment
\n\u2022 Inner suburb hospital
\n\u2022 On the outskirts of the city, with both residential and commercial buildings
\n\u2022 Mid to high-density area
\nTechnology
\n\u2022 Password-protected Wi-Fi for visitors\/patients
\no Visitors and patients can request for password from any receptionist
\n\u2022 Hospital staff use different network, also password-protected
\n\u2022 Internally hosted email for staff
\n\u2022 Nurses and doctors are given a hospital iPad, receptionists use desktops
\n\u2022 Externally hosted software system to manage electronic medical and health records (EMR, EHR)
\no Billing system
\no Prescriptions
\no Scanned documents
\no Medication tracking
\n\u2022 Staff HR system runs on the hospital server (located on the premises)
\n\u2022 Staff files are secured within hospital firewall and cloud-synchronised on nightly basis
\n\u2022 All files are backed up on the hospital server every night
\n\u2022 Cloud files include those from 3 other hospitals in the chain, in surrounding suburbs
\nPeople
\n\u2022 Permanent full-time staff: 200 doctors, 500 nurses, 20 receptionists
\n\u2022 Casual: 35 maintenance staff
\no Operate on roster, 5 each day
\n\u2022 Permanent staff have thorough police & background checks with references
\n\u2022 Staff have given email address with their staff ID and the hospital domain
\n\u2022 Other people engaged with the hospital include community organisations, government staff and student volunteers
\nHelpful resources and reference materials to help you write a Security Plan:
\n\u2022 https:\/\/www.protectivesecurity.gov.au\/system\/files\/2021-06\/pspf-policy-3-security-planning-and-risk-management.pdf
\n\u2022 https:\/\/www.ferc.gov\/sites\/default\/files\/2020-04\/security-plan-example.pdf
\n\u2022 https:\/\/www.protectioninternational.org\/wp-content\/uploads\/2012\/04\/1-7_Manual_English_3rdEd.pdf
\n\u2022 https:\/\/uniserveit.com\/blog\/10-step-cybersecurity-plan-for-your-small-business
\n\u2022 https:\/\/blog.rsisecurity.com\/how-to-write-an-effective-cybersecurity-plan-for-your-small-business\/<\/p>\n","protected":false},"excerpt":{"rendered":"

Assignment 2: Defensive Audit (1500 words 30%) Despite the strictest security protocols and measures, every organisation has certain vulnerabilities that can be exploited by hacking\u2026<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7316,7318,7317,7315,7319,7321],"tags":[642,618,8825,576,116,631,19,643,473,633,630,628,450,597,594,626,635,574,622,624,620,621,619,623,617,625,627,634,629,632,644,645,42,66],"class_list":["post-112519","post","type-post","status-publish","format-standard","hentry","category-best-dissertation-writers-uk","category-british-dissertation-writers","category-dissertation-help-online","category-dissertation-writing-services-uk","category-help-with-dissertation-writing","category-uk-dissertation-help","tag-apps-that-write-essays-for-you-free","tag-assignment-writing-services-in-usa","tag-bes","tag-best-dissertation-writing-services","tag-best-essay-writing-service","tag-best-paper-writing-services","tag-best-research-paper-writing-services-in-usa","tag-best-website-to-write-my-essay","tag-cheap-essay-writing-service","tag-cheap-research-paper-writing-service","tag-college-paper-writing-service","tag-dissertation-help-online","tag-dissertation-writing-services","tag-dissertation-writing-services-illegal","tag-dissertation-writing-services-near-me","tag-dissertation-writing-services-usa","tag-essay-writing-service","tag-free-dissertation-writing-services","tag-homework-essay-writer","tag-homework-essay-writer-free","tag-homework-help-global","tag-homework-help-services","tag-homework-help-usa","tag-homework-writing-help","tag-homework-writing-service","tag-legit-research-paper-writing-services","tag-legitimate-dissertation-writing-services","tag-research-paper-writer-online-free","tag-research-paper-writing-services-online","tag-research-paper-writing-websites","tag-write-my-essay-for-me-cheap","tag-write-my-essay-for-me-tik-tok","tag-write-my-essay-free","tag-write-my-paper"],"_links":{"self":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/112519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/comments?post=112519"}],"version-history":[{"count":0,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/112519\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/media?parent=112519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/categories?post=112519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/tags?post=112519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}