Our Services

Get 15% Discount on your First Order

You have been hired as an information security analyst at

November 11, 2021

You have been hired as an information security analyst at a small company called Astounding Appliances. The company sells appliances online. Astounding Appliances owns and hosts all of its IT assets and forward-facing web applications on site. The assets are about 5 years old. The company is seeking to expand its operations in the next 5 years.

Your manager asks you to help her document the threats and vulnerabilities to the company’s IT operations. In addition to what you already know about the company, you learn the following during your interviews and inspections for this project.

The Astounding Appliances company and all of its IT operations are located in New Orleans, Louisiana. The data center is located on the ground floor of the company’s building. There is no basement. No one can come into the data center without a smart card scan. However, there is a physical key system that can override the smart card scanner and access. There is no inventory of who has keys to the data center, although the company’s vice president for operations doesn’t think that too many people have keys.

Because New Orleans is vulnerable to hurricanes, all of the equipment in the data center is stored in elevated racks that sit on a raised floor. Pumps have also been installed to remove water. The pumps are attached to a generator, which has not been inspected in several years. You learn that it has not been inspected in a timely manner because making sure the generator is functional is not on the organization’s disaster recovery checklist.

From the director of human resources, you learn that any Astounding Appliances employee with a valid smart card can enter the data center; access is not granted based on a need to enter the data center. You also learn that smart card access is not always terminated promptly when employees leave Astounding Appliances. The director of human resources tries to audit smart card validity regularly, but this is a low-priority task for her. You also learn that it is not part of the regular employment process for new employees to complete information security training or to sign the company’s IT acceptable use policy.

Answer below:

1. Identify 6-10 vulnerabilities to Astounding Appliances information systems and data. Be sure to include the asset that is affected by the vulnerability.

2. For each vulnerability that you have already identified, document potential threats associated with it. Be sure to list the relevant information security concern (i.e., confidentiality, integrity, or availability) for the vulnerability-threat pair.

3. For each vulnerability-threat pair, identify the relevant information security concern(s) (i.e., confidentiality, integrity, or availability).

4. For each vulnerability-threat pair, identify the vulnerability category.

5. For each vulnerability-threat pair, identify the threat category.

500 words

Share This Post

Order a Similar Paper and get 15% Discount on your First Order

Related Questions

Follow all directions Overview In your Health Care Issue Impacts activity, you investigated where health care issues can have

Follow all directions Overview In your Health Care Issue Impacts activity, you investigated where health care issues can have an impact on a provider type. In this assignment, you will take a deeper dive into these areas of impact to consider actions that providers must take to effectively address the

2 In this unit, you learned about nonroutine skills and how management information systems (MIS) can help you to gain those skills. What nonroutine

2 In this unit, you learned about nonroutine skills and how management information systems (MIS) can help you to gain those skills. What nonroutine skills do you currently possess? Do you consider those skills to be marketable?

2 Article II, Section I of the U.S. Constitution provides that the president must “take care that the laws be faithfully executed.” Presidents have

2 Article II, Section I of the U.S. Constitution provides that the president must “take care that the laws be faithfully executed.” Presidents have used this authority to issue executive orders, which are orders to federal agencies that are a part of the executive branch and which contain detailed instructions

Engaged employees are linked to superior business performance impacting a positive bottom line. An engaged workforce is critical for cultivating an

Engaged employees are linked to superior business performance impacting a positive bottom line. An engaged workforce is critical for cultivating an environment where employees and businesses thrive. The onset of COVID-19 brought tremendous change to the workplace and threw businesses for a loop. As a result, are today’s new and

Article Critique This assignment requires you to READ the assigned article and write an article critique. In this critique you will share the key

Article Critique This assignment requires you to READ the assigned article and write an article critique. In this critique you will share the key points of the article so your reader can get a clear picture of what the article is about. You will also identify and evaluate the strengths

Develop a strategic plan for the company you have used throughout this course and share it with stakeholders. The company chosen is Amazon Create a 10- to

Develop a strategic plan for the company you have used throughout this course and share it with stakeholders. The company chosen is Amazon Create a 10- to 15-slide presentation for key stakeholders to solicit their approval of your strategic plan. Address the following in your presentation: • An introduction with

Machine learning questions. 4 questions. look at attached 1. Please construct a new dataset by either adding two independent variables or removing two

Machine learning questions. 4 questions. look at attached 1. Please construct a new dataset by either adding two independent variables or removing two independent variables from finalsample.dta dataset. If you choose to add two independent variables, you could add any two independent variables that you think help explain stock returns. If you choose to remove two independent variables, you

your submission must be your original work. No more than a combined total of 30% of the submission and no more than a 10% match to any one individual

your submission must be your original work. No more than a combined total of 30% of the submission and no more than a 10% match to any one individual source can be directly quoted or closely paraphrased from sources, even if cited correctly. The similarity report that is provided when

Ward, June and Wally reside in the hypothetical state of Evermore. They come to your office and state that they would like to form a corporation to

Ward, June and Wally reside in the hypothetical state of Evermore. They come to your office and state that they would like to form a corporation to organize their business selling souvenirs in the city of Mayfield. They want the corporation to be called WJW Souvenirs, Inc. Ward is planning

Samantha walks into your office. She tells you that she has a husband, Edward, of 10 years. Samantha and Edward have 4 children named Alexa, Brian, Chloe

Samantha walks into your office. She tells you that she has a husband, Edward, of 10 years. Samantha and Edward have 4 children named Alexa, Brian, Chloe and David. Edward has 3 children from a previous marriage, named Felix, Gavin and Harriet. Samantha has $6,000,000 in the bank and no

Adam Smith walks into your office and announces that he is officially up to his eyeballs in debt. Specifically, he owes the following to the following

Adam Smith walks into your office and announces that he is officially up to his eyeballs in debt. Specifically, he owes the following to the following people: – $57,000 to Citi Bank in unsecured credit card debt – $22,000 to Bank of America in unsecured credit card debt – $5,000

Instructions are attached supporting doc attached Presenter’s Name: Gregory

Instructions are attached supporting doc attached Presenter’s Name: Gregory Swim Person Providing Critique: Brianna Davis Component Comments Case summary: Case was summarized in a succinct, easy-to-understand manner and was in the presenter’s own words. I understood the issue confronting the Supreme Court. APA’s brief: The APA’s stance was presented in

Instructions are attached supporting doc attached Presenter’s Name: Lila Davis

Instructions are attached supporting doc attached Presenter’s Name: Lila Davis Person Providing Critique: Brianna Davis Component Comments Case summary: Case was summarized in a succinct, easy-to-understand manner and was in the presenter’s own words. I understood the issue confronting the Supreme Court. APA’s brief: The APA’s stance was presented in

1 paragraph, include reference. Please respond to student response located under NOTE PAD Visit the National Institutes of HealthLinks to an external

1 paragraph, include reference. Please respond to student response located under NOTE PAD Visit the National Institutes of HealthLinks to an external site.. Use the Search NIH box to search for and click on “list of registries.” Choose any disease you care to explore. How is this disease presented by

Attached In your readings and related discussions, you have examined the relationship between social work practice and social policy development a

Attached In your readings and related discussions, you have examined the relationship between social work practice and social policy development at themicro, mezzo, andmacro levels. Given that “the coremission of the social work profession is the promotion of social, economic, and political justice for all people” (Colby et al., 2013,

Attached Overview As you prepare to be a social work leader in the disaster and emergency relief field, you will first engage one of themost

Attached Overview As you prepare to be a social work leader in the disaster and emergency relief field, you will first engage one of themost recognized national disaster relief organizations, the American Red Cross.While social work curriculum and this DSWprogram provide you with the foundation and generic skills needed, youmust

Please Answer each question separately with at least 250 words 2 in text citations for each question and 2 references for each question. 1.Under what

Please Answer each question separately with at least 250 words 2 in text citations for each question and 2 references for each question. 1.Under what conditions should a company consider adopting a global geographical structure as opposed to a global product structure? Why? Is it logical for a transnational organization

Please see the file attached Online Social Media Principles (12/2/09) Online Social Media

Please see the file attached Online Social Media Principles (12/2/09) Online Social Media Principles INTRODUCTION Every day, people discuss, debate and embrace The Coca‐Cola Company and our brands in thousands of online conversations. We recognize the vital importance of participating in these online conversations and are committed to ensuring that we participate in online social media the right way. These Online Social Media Principles have been developed to help empower our associates to participate in this new frontier of marketing and communications, represent our Company, and share the optimistic and positive spirits of our brands. The vision of the Company to achieve sustainable growth online and offline is guided by certain shared values that we live by as an organization and as individuals: • LEADERSHIP: The courage to shape a better future; • COLLABORATION: Leveraging our collective genius; • INTEGRITY: Being real; • ACCOUNTABILITY: Recognizing that if it is to be, it’s up to me; • PASSION: Showing commitment in heart and mind; • DIVERSITY: Being as inclusive as our brands; and • QUALITY: Ensuring what we do, we do well. These Online Social Media Principles are intended to outline how these values should be demonstrated in the online social media space and to guide your participation in this area, both when you are participating personally, as well as when you are acting on behalf of the Company. It is critical that we always remember who we are (a marketing company) and what our role is in the social media community (to build our brands). The same rules that apply to our messaging and communications in traditional media still apply in the online social media space; simply because the development and implementation of an online social media program can be fast, easy, and inexpensive doesn’t mean that different rules apply. The Company encourages all of its associates to explore and engage in social media communities at a level at which they feel comfortable. Have fun, but be smart. The best advice is to approach online worlds in the same way we do the physical one – by using sound judgment and common sense, by adhering to the Company’s values, and by following the Code of Business Conduct and all other applicable policies. COMPANY COMMITMENTS The Company adheres strongly to its core values in the online social media community, and we expect the same commitment from all Company representatives – including Company associates, and associates of our agencies, vendors and suppliers. Any deviation from these commitments may be subject to disciplinary review or other appropriate action. The Five Core Values of the Company in the Online Social Media Community