CST 630 University of Maryland Risk Management Network Security Baseline Analysis Conduct a Security Analysis Baseline In the first step of the project, yo

CST 630 University of Maryland Risk Management Network Security Baseline Analysis Conduct a Security Analysis Baseline
In the first step of the project, you will conduct a security analysis baseline of the Security, which will include a data-flow diagram of connections and endpoints, and all types of access points, including wireless. The baseline report will be part of the overall security assessment report (SAR). Student Name:
Date:
This form provides the same classroom instructions in a checklist form to help students and
professors quickly evaluate a submission
Project 1: Requires the Following Three Pieces
1. Security Assessment Report (12 pages)
2. Executive Briefing Slides (three to five slides – narration not needed)
3. Lab Experience Report with Screenshots
1. Security Assessment Report (12 pages)
Conduct a Security Analysis Baseline (3 of 12 ages)
Secu+10:27
Typical attacks to enterprise networks and their descriptions. Include Trojans, viruses, worms,
denial of service, session hijacking, and social engineering.
Include the impacts these attacks have on an organization.
Network infrastructure and diagram, including configuration and connections
Describe the security posture with respect to LAN, MAN, WAN, enterprise.
Network infrastructure and diagram, including configuration and connections and endpoints.
What are the security risks and concerns?
What are ways to get real-time understanding of the security posture at any time?
How regularly should the security of the enterprise network be tested, and what type of tests should
be used?
What are the processes in play, or to be established to respond to an incident?
Does the security workforce have the requisite technical skills and command of the necessary
toolsets
to do
the jobprofessional
required? development roadmap in place to maintain and/or improve the
Is there an
adequate
skill set as needed?
Describe the ways to detect these malicious code and what tactics bad actors use for evading
detection.
In the network diagram: include the delineation of open and closed networks, where they co-exist.
In the open network and closed network portion, show the connections to the Internet
Physical hardware components. Include routers and switches. What security weaknesses or
vulnerabilities are within these devices?
Discuss operating systems, servers, network management systems.data in transit vulnerabilities
endpoint access vulnerabilities
external storage vulnerabilities
virtual private network vulnerabilities
media access control vulnerabilities
ethernet vulnerabilities
Possible applications. Current and future mobile applications and possible future Bring Your Own
Include:
Device policy.
remediation
mitigation
countermeasure
recovery
Provide the methods used to provide the protections and defenses.
From the identification of risk factors in the risk model, identify the appropriate security controls
from NIST SP 800-53A and determine their applicability to the risks identified.
Determine a Network Defense Strategy 2/12 pages
Outline
test violations.
Identify how
how you
you would
will assess
the effectiveness of these controls and write test procedures that could
be used to test for effectiveness.
Write them in a manner to allow a future information systems security officer to use them in
preparing for an IT security audit or IT certification and accreditation.
Explain the different testing types (black box testing, white box testing).
Plan the Penetration Testing Engagement 2/12 pages
Include
involved
processes,
and timeframe.
Developall
a letter
of intent
to the people,
organization,
and within the letter, include some formal rules of
engagement (ROE)
Conduct
a within
Network
Penetration
Testcontrol
4/12families
pages from the NIST
After finding the security
issues
the network,
define which
800-53 are violated by these issues.
Explain in the SAR why each is a violation, support your arguments with a copy of your evidence
Provide suggestions on improving the security posture of these violations.
Complete
a Risk
pages
Complete
your SAR with
a riskManagement
management costCost
benefitBenefit
analysis. Analysis
Think about1/12
the cost
of
violations and other areas if you do not add the controls. Then add in the cost for implementing
*****Conduct a Security Analysis Baseline Feedback*****
2. Executive Briefing (three to five slide presentation – narration not
Explain key points to executives
Title Slide
Use of Readable Fonts and Color
Summarizes Findings and Recommendations at High Level
*****Executive Briefing Feedback*****
3. Lab Experience Report with Screenshots
Summarizes the Lab Experience and Findings
Responds to the Questions
Provides Screenshots of Key Results
*****Lab Experience Report Feedback*****
Areas to
Improve
Student Name:
Date:
This form provides the same classroom instructions in a checklist form to help students and
professors quickly evaluate a submission
Project 1: Requires the Following Three Pieces
1. Cybersecurity Incident Report (CIR) (12 pages) with
Executive summary (one page) at the beginning of CIR
2. Executive Briefing Slides (two to three slides – narration not needed)
3. Lab Experience Report with Screenshots
1. Cybersecurity Incident Report (CIR) (12 pages)
Develop a Wireless and BYOD Security Plan
Executive summary: A one-page summary at the beginning of the report.
Using NIST 800-153, provide an executive summary to answer other security concerns related to
BYOD and wireless.
Provide answers to the threat of unauthorized equipment or rogue access points on the company
wireless network and the methods to find other rogue access points.
Describe how to detect rogue access points and how they can actually connect to the network.
Describe how to identify authorized access points within your network.
Within your plan, include how the Cyber Kill Chain framework and approach could be used to
improve the incident response times for networks.
Include this at the beginning of your CIR as the basis for all wireless- and BYOD-related problems
within the network.
Title the section “Wireless and BYOD Security Plan.”
Track Suspicious Behavior
Propose
howyou
youtrack
would
suspicious
employeeasset?
movements using various tools and
How would
thetrack
location
of the company
techniques.
Explain how identity theft could occur and how MAC spoofing could take place in the
workplace.
Areas to
Improve
How would you protect against both identity theft and MAC spoofing?
Include
of approved
devices
for this
network.
may include
authorized
Addressaifwhitelist
it is feasible
to determine
if MAC
spoofing
andExamples
identity theft
has taken
place in
access points, firewalls, and other similar devices.
Disuss any legal issues, problems, or concerns with your actions.
What should be conducted before starting this investigation?
Were your actions authorized, was the notification valid, or are there any other concerns?
Include your responses as part of the CIR with the title “Tracking Suspicious Behavior.”
Develop
a Continuous
Plan
Provide for your leadership
a description
of wiredImprovement
equivalent privacy
and also Wi-Fi
protected access networks, for education purposes.
Include the pros and cons of each type of wireless network, as well as WPA2.
Define the scheme for using preshared keys for encryption.
Is this FIPS 140-2 compliant, and if not, what is necessary to attain this?
Include aa list
of other wireless
such as including
Bluetooth the pros, cons, and suitability for
Provide
comparative
analysisprotocols,
of four protocols
your company.
Include your responses as part of the CIR with the title “Continuous Improvement Plan.”
Develop Remote Configuration Management
Include a description of remote configuration management and describe how it is used in
maintain
theofsecurity
posture of device
your company’s
network from the network. Implement this
The
owner
an undocumtnted
must be removed
and explain how you would remove the employee’s device.
Explain your
how responses
you wouldasshow
device
was”Remote
removed?
Include
part proof
of thethat
CIRthe
with
the title
Configuration
Management.”
Employee
Provide a definition of adInvestigate
hoc wireless networks
and Misconduct
identify the threats and vulnerabilities
to a company.
How
could this network contribute to the company infrastructure and how would you
protect against
those threats?
Address
self-configuring
dynamic networks on open access architecture and the threats and
vulnerabilities
them,connecting
as well as the
protections
that should
How
would youassociated
detect an with
employee
to apossible
self-configuring
network
or an be
ad hoc
network?
How would signal hiding be a countermeasure for wireless networks?
Whatisare
countermeasures
signalused
hiding?
How
thethe
service
set identifierfor
(SSID)
by cybersecurity professionals on wireless
networks?
Are these always broadcast, and if not, why not?
How would you validate that the user is working outside of business hours?
Include your responses as part of the CIR with the title “Employee Misconduct.”
Analysis of Wireless Traffic
Analyzeyour
wireless
traffic.from the lab as part of the CIR with the title “Wireless Traffic
Include
responses
Analysis.”
***** Cybersecurity Incident Report Feedback*****
2. Executive Briefing Slides (3-5 slides – Narration Not Needed)
Explain key points to executives
Title Slide
Use of Readable Fonts and Color
Summarizes Findings and Recommendations at High Level
*****Executive Briefing Feedback*****
3. Lab Experience Report with Screenshots
Analyze wireless traffic
Summarizes the Lab Experience and Findings
Responds to the Questions
Provides Screenshots of Key Results
*****Lab Experience Report Feedback*****
Student Name:
Date:
This form provides the same classroom instructions in a checklist form to help students and
professors quickly evaluate a submission
Project 3: Requires the Following Two Pieces
1. Cybersecurity For A Successful Acquisition Report: (12 page min)
Executive summary (one page)
2. Executive Briefing Slides (three to five slides – narration not needed)
1. Cybersecurity For A Successful Acquisition Report: (12 page min)
Conduct a Policy Gap Analysis
Executive summary: This is a one-page summary at the beginning of your report.
Are companies going through an M&A prone to more attacks or more focused attacks?
If so, what is the appropriate course of action?
Should the M&A activities be kept confidential?
explain to the executives that before any systems are integrated, their security policies will
need to be reviewed
Conduct a policy gap analysis to ensure the target company’s security policies follow
relevant industry standards as well as local, state, and national laws and regulations.
Identify what, if any, laws and regulations the target company is subject to.
How would you identify the differences?
How would you learn about the relevant laws and regulations?
How would you ensure compliance with those laws and regulations?
Use PCI standards to identify a secure strategy, and operating system protections to protect
the credit card data
Select at least two appropriate requirements from the PCI Standards DSS 12 set of
requirements and explain how the controls should be implemented, how they will change the
current network, and any costs associated with implementing the change.
Protocols
for
Streaming
Services
review the protocols,Review
explain how
they work
along
with any known
vulnerabilities, and how
to securewhat
the company
cyberattacks.
Identify
streamingfrom
the companies
are doing and the specific technology they are
leveraging.
What those
are thebeen
technical
vulnerabilities
associated
withhas
the the
protocols
involved?
Have
mitigated?
And to what
extent (i.e.,
risk been
reduced to zero,
reduced somewhat, shifted to a third party, etc.)?
Would
those risks
to thecompany’s
current (takeover)
company
after the merger?
What residual
risk extend
to the target
assets and
IP remain?
a. the
Would
that be
to cancel
the M&A?
If
response
tobad
#5 isenough
yes, then,
what should
the target company do to further mitigate the
risk? How
should
takeovertocompany
the(implementing
risk?
What
are the
coststhe
associated
the targetmitigate
company
the appropriate
mitigation)? If the takeover firm has to take additional measures, identify those costs as
Assess the Merged Network Infrastructure
Explain what tactics, techniques, and procedures you would use to understand the network.
identify firewalls, DMZ(s), other network systems, and the status of those devices.
Review the Wireless and BYOD Policies
Explain the media company’s current stance on wireless devices and BYOD.
Areas to
Improve
Explain to the managers of the acquisition what needs to be done for the new company to
meet the goals of the BYOD policy.
Develop activities
a Data Protection
Plan and defense measures
Include the benefits, implementation
required for protection
such as full
diskleadership
encryption,the
BitLocker,
andofplatform
identity keys.
Convey
to your
importance
system integrity
and an overall trusted
computing
base,this
environment,
and
support
Describe what
would entail
and
include Trusted Platform Module (TPM) components
and drivers.
How are these mechanisms employed in an authentication and authorization system?
Review Supply Chain Risk
Include
chain risks
and list 800-161
the security
measures
place
to mitigate Practices
those risks.
Use
the supply
NIST Special
Publication
Supply
ChaininRisk
Management
for
Federal Information Systems and Organizations to explain the areas that need to be
a Vulnerability
Use NIST Special Build
Publication
800-40 Guide toManagement
Enterprise PatchProgram
Management Technologies
to develop
a program
to scan
build a vulnerability
program
Explain
to the
managers
how and
to implement
this change,management
why it is needed,
and any costs
involved.
EducateofUsers
Inform the users for the new and old company
the changes, including policies, processes,
and other aspects that were updated
Explain to the acquisition managers the requirements for training the workforce.
*******Cybersecurity For A Successful Acquisition Report
2. Executive Briefing Slides (3-5 slides – Narration Not Needed)
Explain key points to executives
Title Slide
Use of Readable Fonts and Color
Summarizes Findings and Recommendations at High Level
*******Executive Briefing Slides Feedback******
Student Name:
Date:
This form provides the same classroom instructions in a checklist form to help students and
professors quickly evaluate a submission
Project 4: Requires the Following Three Pieces
1. Proposal for Secure Videoconferencing (6 page max)
Executive summary: (one page) at the beginning of Proposal
2. Executive Briefing Slides (three to five slides – narration not required)
3. Lab Report
1. Proposal for Secure Videoconferencing (6 pages max)
Develop Functional Requirements for Videoconferencing
Executive summary: (1 page) at the beginning of Proposal for Secure Videoconferencing
Explain the videoconferencing solutions for Skype, GotoMeeting, Polycom, and Cisco
Webex; Include their capabilities, advantages, and disadvantages.
Identify costs as well as implementation and support requirements for Skype, GotoMeeting,
Polycom, and Cisco Webex videoconferencing.
The functional requirements and the three possible solutions will be a section of your
Proposal for Secure Videoconferencing
Discuss Implementation Challenges
Include the advantages and disadvantages of the implementation options for the three
systems you selected.
Include the changes the media company will need to make to implement the systems.
Explain how system administration or privileged identity management will operate with
these systems.
Examine how data exfiltration will occur with each of the new systems.
Identify Vendor Risks
Look at the systems’ known vulnerabilities and exploits. Examine and explain the past history
of each vendor with normal notification timelines, release of patches, or work-arounds (solutions
within the system without using a patch).
Address the timeliness of response with each company in helping customers stay secure.
Develop
Best Practices
for Secure
Videoconferencing
Outline security
best practices
for videoconferencing
that
you would like users and systems
administrators
to follow.
Discuss
how these
best practices will improve security and minimize risks of data
exfiltration
as well
as snooping
Title
this section
“best
practices”. It will be part of the overall Proposal for Secure
Videoconferencing.
Develop
Integrity
Checks
Develop system integrity checks
for System
files shared
between users
of the videoconferencing
systems.
Submit
Your Proposal
Recommend a system that best meets
the business
functionality and security requirements of
the company.
Prepare
a set of high-level executive briefing slides to give the CEO and CIO an overview
of your study.
*******Proposal for Secure Videoconferencing Feedback*******
Prepare
2. Executive
a set of Briefing
high-level executive
(3 to 5 slides
briefing
– Narration
slides to giveNot
the CEO
Needed)
and CIO an overview
of your study.
Title Slide
Use of Readable Fonts and Color
Summarizes Findings and Recommendations at High Level
3. Lab Experience Report
Generate a lab report that will be part of your final assignment (Step 5)
Summarizes the Lab Experience and Findings
Responds to the Questions
Provides Screenshots of Key Results
*******Lab Experience Report Feedback******
Areas to
Improve
Student Name:
Date:
This form provides the same classroom instructions in a checklist form to help students
and professors quickly evaluate a submission
Project 5: Requires the Following FOUR Pieces
1. Team Forming and Completion of Charter
2. Cybersecurity Technology Strategic Plan (12 to 15 pages)
3. Executive Presentation (5 to 10 slides – in class or online presentation or narration)
4. Lab Report
1. Team Forming and Completion of Charter
Upload completed Charter to Team Locker in Classroom with tasks and dates for each
team member.
2. Cybersecurity Technology Strategic Plan
Select Devices and Technologies
Select Devices and Technologies most appropriate for data loss prevention for your
organization’s business mission and future success.
Research and choose from the following and discuss your business rationale for selecting
or not selecting them:
-IPv6
-Internet of Things (IoT)
-Blockchain
-Tokenization
-Data Masking
– Data Obfuscation
– Operational Context
– Tamper-proofing
– Big Data Analytics
Include significant detail about these, including what kinds of IoT devices might be
Develop Goals and Objectives
Focus on the organizational mission and develop a set of goals and objectives to show how
Include a discussion for deploying, maintaining, and securing these devices and
Prepare a SWOT Analysis Table
Justify adding these devices and technologies to the network infrastructure.
In order to do this, perform a strengths, weaknesses, opportunities, and threats (SWOT)
SWOT Chart and Analysis
Ensure the following questions are answered:
– How do they influence the operation and maintenance of the network?
– What can be done to overcome these limiting factors?
Address Integration and Implementation issues
Discuss integration issues and problems that can arise when you try to implement them
Address legacy devices in the infrastructure.
Update the Data Flow Diagram
Complete the lab, create, and include an updated data-flow diagram.
Plan People, Process, and Data Governance Issues
Discuss people, process, and data governance aspects of deploying new technology.
Address possible process changes.
Address possible personnel changes, hiring, training, retraining or users and
administrators.
Finalize the Report
Compile, review, edit, and proofread
As you write the conclusions and summary statements, address the following possible
– Any key impacts to the organization or network infrastructure
– What will the organization need to do in the future to meet goals and objectives.
– How will your organization ensure continuous improvement?
– What possible roadblocks could your organization face?
– How would you oversome these potential roadblocks?
*******Cybersecurity Technology Strategic Plan Feedback*******
3. Presentation (Complete Set of Team Slides and Narration of a
Title Slide
Use of Readable Fonts and Color
Summarizes Findings and Recommendations at High Level
Sli…
Purchase answer to see full
attachment