Travis Hurst
IS3110
8/22/2016
Business Continuity Plan
Introduction: DLIS has decided to develop a business continuity plan (BCP) with the full support of
management.
Instructions: DLIS business continuity plan will come into effect as soon as all element
Travis Hurst
IS3110
8/10/2016
Quiz 9
1. Define a DRP and explain when it is invoked.
A DRP helps identify, organize, and prepare for disasters; be they internal, external, weather, or other
types of disaster. They help prevent/recover from short and long-
Travis Hurst
IS3110
8/3/2016
Quiz 6
1. Define an SLA and state why it is required in a risk adverse organization.
A service-level agreement (SLA) is a document that identifies an expected level of performance. They
used in organizations as a contract of a
Travis Hurst
IS3110
7/27/2016
Unit 1 Assignment Application of Risk Management
1. Analyze and explain each of the threats and vulnerability pairs and their likelihood of
occurrence.
I. Two facilities connected to headquarters via external ISP
II. Sales co
Travis Hurst
IS3110
8/10/2016
Quiz 7
1. What does MAO define?
The maximum acceptable downtime for a system.
2. Define CSFs for a BIA.
Any functions considered vital to an organization.
3. List four of the seven steps for a contingency plan based on the NI
Travis Hurst
IS3110
7/27/2016
Unit 3 Discussion Risk Management Process
Risk management requires a process with a clear purpose, reliable inputs, welldesigned activities and value-added outputs. The risk management process typically
includes such activiti
Travis Hurst
IS3110
7/27/2016
IS3110 Unit 2 Assignment PCI DSS and the Seven Domains
1. The main touch points that need to be addressed is building and maintaining a
secure network, protecting cardholder data, maintaining a vulnerability management
progra
Travis Hurst
IS3110
7/27/2016
Unit 5 Discussion Risk Assessment and Risk Mitigation
Using our risk management skills on the NIST templates, the controls that we should be placed on a file
server are:
Access Control: User-based Collaboration and Informatio
Travis Hurst
IS3110
7/27/2016
Unit 4 Assignment Risk Assessment Approaches
Estimate the Qualitative and quantitative risks of bringing the project to
completion:
On time: LOW
-
Assuming information provided is accurate, the risks should be little to none
Travis Hurst
IS3110
8/22/2016
Lab 3 How to Identify Risks, Threats & Vulnerabilities in an IT Infrastructure Using ZeNmap GUI
(Nmap) & Nessus Reports
1. What are the differences between ZeNmap GUI (Nmap) and Nessus? Nessus is a
vulnerability scanner while
Travis Hurst
IS3110
8/22/2016
Lab 1 How to Identify Threats & Vulnerabilities in an IT Infrastructure
Overview
One of the most important first steps to risk management and implementing a risk mitigation strategy is to
identify known risks, threats, and vu
Travis Hurst
IS3110
7/4/2016
Random Project 1
Defense Logistics Information Service (DLIS)
Project Part 1
I. Introduction
2. Outline
3. Scope
4. Compliance Laws
5. Key Roles
Risk Management Schedule
a. Scope
b. Assign to departments
c. Risk Matrix
Project
Travis Hurst
IS3110
8/22/2016
Lab 2
Nationwide Retailer under PCI DSS standard requirements
Risk - Threat Vulnerability
Primary Domain
Impacted
Risk
Impact/Factor
Service Provider
SLA is not
achieved
LAN-to-WAN
1
Unauthorized
access from pubic
Internet
LA
Travis Hurst
IS3110
8/22/2016
Lab 4
1. What is the goal and purpose of BIA?
Business impact analysis goal is to reveal any vulnerability and then plan to develop strategies
for minimizing risk.
2. Why is a business impact analysis (BIA) an important first
Travis Hurst
IS3110
8/22/2016
Lab 3
1. What are the differences between ZeNmap GUI (Nmap) and Nessus?
Nessus is a vulnerability scanner while Nmap is used for mapping a networks host and the hosts
open ports.
2. Which scanning application is better for pe
Travis Hurst
IS3110
8/22/2016
Lab 5
1. How does documented back-up and recovery procedures help achieve RTO? By documenting
and implementing backup and recovery procedures, the process for recovery is much efficient,
helping with the time portion of RTO,
Travis Hurst
IS3110
8/22/2016
Lab 1 How to Identify Threats & Vulnerabilities in an IT Infrastructure
Overview
One of the most important first steps to risk management and implementing a risk mitigation strategy is to
identify known risks, threats, and vu
Travis Hurst
IS3110
7/4/2016
Random Assessment 1
1. Healthcare organizations are under strict compliance to HIPPA privacy requirements which require
that an organization have proper security controls for handling personal healthcare information (PHI)
priv
Travis Hurst
IS3110
7/4/2016
Random Quiz 1
1. Define an SLA and state why it is required in a risk adverse organization. A service-level agreement
(SLA) is a document that identifies an expected level of performance. They used in organizations as a
contra
1
Derrick Jones
ITT-Technical Institute
HU4640 Ethics
07-17-15
2
Define utilitarianism, act-utilitarianism, and rule utilitarianism:
Rule and act must be examined both individually before defining the difference between
them. An act alone is how an indivi
1
Derrick Jones
ITT-Technical Institute
HU4640 Ethics
07-05-15
2
Consequential Versus Nonconsequential
A consequentialist theory judges the rightness or wrongness of an action based on the
consequences that action has (Marietta, 2008). Such argument is si
Karim Sanchez
May 26, 2015
IS3110
Week 4 LAB Business Impact Analysis for an IT Infrastructure
1.The purpose of a business impact analysis is to determine what impact a disruptive event
would have on a financial institution
2. It includes an exploratory c
Karim Sanchez
May 6, 2015
IS3110
Week 3 Lab: Assessment Worksheet
1. Zenmap is more can be used to map a network and nessus its a
vulnerability scanner.
2. Zenmap
3. Nessus
4. It lets you know the severity of the vulnerability.
5. Not really, this is beca
Karim Sanchez
May 27, 2015
IS3110
Week 5 Assignment: CIRT Planning
1. Describe how a CIRT plan helps an organization mitigate risk.
A Computer Incident Response Team (CIRT) plan helps an organization mitigate risk by preparing an
organization for incident
Karim Sanchez
May 26, 2015
IS3110
Risk Management Plan
Introduction:
Risk management at its basis is simply a systematic practice of electing the most cost effective
methodologies for minimalizing the impact of threat realization to any organizational str
Week 1 Assignment 1: Application of Risk Management
Threat
Vulnerability
Impact
1.
Malware Infections
No antivirus/outdated
It can spread throughout the network and eventually bring down the
servers
2.
Man in the middle attacks
Open Network/Weak
Credentia
Karim Sanchez
4/8/15
Week 1 Laboratory
How to Identify Threats & Vulnerabilities in an IT Infrastructure
Learning Objectives and Outcomes
Upon completing this lab, students will be able to:
Identify common risks, threats, and vulnerabilities found through
Karim Sanchez
4/22/2015
IS3110
Week 2 Assignment: Risk Assessment
To be able to accomplish this task it is necessary to hire more IT stuff that is well trained
in dealing with security policies, and also very familiar with enterprise level firewalls and
n
