{"id":106737,"date":"2022-11-19T05:11:49","date_gmt":"2022-11-19T05:11:49","guid":{"rendered":"https:\/\/assignmenttutors.net\/blog\/it-security-risk-assessment-itec610\/"},"modified":"2022-11-19T05:11:49","modified_gmt":"2022-11-19T05:11:49","slug":"it-security-risk-assessment-itec610","status":"publish","type":"post","link":"https:\/\/assignmenttutors.net\/blog\/it-security-risk-assessment-itec610\/","title":{"rendered":"It security risk assessment | itec610"},"content":{"rendered":"
\n

2. Introduction<\/strong>\u00a0<\/p>\n

You are employed with Government Security Consultants, a subsidiary of Largo Corporation. As a member of IT security consultant team, one of your responsibilities is to ensure the security of assets as well as provide a secure environment for customers, partners and employees. You and the team play a key role in defining, implementing and maintaining the IT security strategy in organizations.\u00a0<\/p>\n

A government agency called the Bureau of Research and Intelligence (BRI) is tasked with gathering and analyzing information to support U.S. diplomats.\u00a0<\/p>\n

In a series of New York Times articles, BRI was exposed as being the victim of several security breaches. As a follow up, the United States Government Accountability Office (GAO) conducted a comprehensive review of the agency\u2019s information security controls and identified numerous issues.\u00a0<\/p>\n

The head of the agency has contracted your company to conduct an IT security risk assessment on its operations. This risk assessment was determined to be necessary to address security gaps in the agency\u2019s critical operational areas and to determine actions to close those gaps. It is also meant to ensure that the agency invests time and money in the right areas and does not waste resources. After conducting the assessment, you are to develop a final report that summarizes the findings and provides a set of recommendations. You are to convince the agency to implement your recommendations.\u00a0<\/p>\n

This learning activity focuses on IT security which is an overarching concern that involves practically all facets of an organization\u2019s activities. You will learn about the key steps of preparing for and conducting a security risk assessment and how to present the findings to leaders and convince them into taking appropriate action.\u00a0<\/p>\n

Understanding security capabilities is basic to the core knowledge, skills, and abilities that IT personnel are expected to possess. Information security is a significant concern among every organization and it may spell success or failure of its mission. Effective IT professionals are expected to be up-to-date on trends in IT security, current threats and vulnerabilities, state-of-the-art security safeguards, and security policies and procedures. IT professionals must be able to communicate effectively (oral and written) to executive level management in a non-jargon, executive level manner that convincingly justifies the need to invest in IT security improvements. This learning demonstration is designed to strengthen these essential knowledge, skills, and abilities needed by IT professionals.\u00a0<\/p>\n

3. Steps to Completion<\/strong>\u00a0<\/p>\n

Your instructor will form the teams. Each member is expected to contribute to the team agreement which documents the members\u2019 contact information and sets goals and expectations for the team.\u00a0<\/p>\n

1) Review the Setting and Situation\u00a0<\/p>\n

The primary mission of the Bureau of Research and Intelligence (BRI) is to provide multiple-source intelligence to American diplomats. It must ensure that intelligence activities are consistent with U.S. foreign policy and kept totally confidential. BRI has intelligence analysts who understand U.S. foreign policy concerns as well as the type of information needed by diplomats.\u00a0<\/p>\n

The agency is in a dynamic environment in which events affecting foreign policy occur every day. Also, technology is rapidly changing and therefore new types of security opportunities and threats are emerging which may impact the agency.\u00a0<\/p>\n

Due to Congressional budget restrictions, BRI is forced to be selective in the type of security measures that it will implement. Prioritization of proposed security programs and controls based on a sound risk assessment procedure is necessary for this environment.\u00a0<\/p>\n

The following incidents involving BRI\u2019s systems occurred and reported in the New York Times and other media outlets:\u00a0<\/p>\n