Book title: Cybersecurity Essentials - Charles J. BrooksChapter 1 - Infrastructure security in the Real worldFrom the information provided in the first scenario, consider the National Institute of Standards and Technology (NIST) functions detailed in this section and observe how they relate to each category.1. How to know if someone or something was attempting to access, disable, degrade, or destroy one or more of the devices and/or systems in the substation?2. How to detect anomalies and events that might impact the operation of the substation (NIST DE.CM-2, 8)?(Refer to screenshot for reference) Security ChallengesThe NIST Cybersecurity Framework was developed by the U.S. National Institute of Standards and Technology(NIST) to provide a set of independent guidelines that organizations can use to implement or upgrade theircybersecurity programs. Because the framework is a product-independent tool, it provides guidelines that anyorganization can tailor to meet its own cybersecurity needs.The frameworks are divided into five functions (Identify, Protect, Detect, Respond, and Recover) that provide a top-level description of the cybersecurity development process. Each function is then divided into applicable categoriesthat underpin the stated function. Each category is further divided into subcategories and implementationmethodology. Finally, the subcategories are supported by lists of reference documents that contain the nuts and boltof building the cybersecurity program.This chapter will kickstart your thought processes for what you are about to learn in Part I. It contains two specificcybersecurity scenarios to which you will be asked to apply the NIST Framework in order to produce a cybersecuritysolution that meets the desired objectives. In each case, you will be provided with specific subcategories to research,along with some guidance to help you produce your solutions.In this first pass through the scenarios, you are expected to generate and record general observations about securingthe infrastructure described, as you have not yet been introduced to the supporting material. As mentioned earlier,this is activity is designed to get your cybersecurity thought processes started.In Chapter 5, you will return to these scenarios and use what you have learned in Chapters 2, 3, and 4 to revise yourinitial assessments. You will also compare your observations to those of professional security specialists who haveprovided their observations and solutions for these scenarios.Infrastructure Security Scenario 1You are in charge of planning and implementing a security system for a new electrical substation that will be builtnext to a new housing development. The substation is equipped with high-voltage electrical switching gear for thesurrounding community. It is not manned on a full-time basis but does have a control building that housesinstrumentation and communication equipment, as shown in Figure 1.1. COMMUNICATION345KV SHUNT& CONTROLEQUIPMENT INSIDEREACTOR345/115KVTRANSFORMERSDOORCONTROLBUILDINGCONCRETEWALLGATE14 FTDOORLFIREWALL40 FTCHAIN LINKFENCEGATEFIGURE 1.1 The Electrical SubstationThe high-voltage switch gear accepts electrical power from different sources, which it then conditions and routes tothe community users as needed. The energy arrives on a set of different high-voltage supply lines and leaves thefacility via different sets of distribution lines.The monitoring devices and control systems in the substation communicate with different parts of the utility'stransmission and distribution system to route electrical power where and when it is needed. These communicationchannels include wireless radio signals, signals transmitted across the power lines, and traditional networkcommunications media.

Book title: Cybersecurity Essentials - Charles J. Brooks Chapter 1 - Infrastructure security in the Real world From the information provided in the first scenario, consider the National Institute of Standards and Technology (NIST) functions detailed in this section and observe how they relate to each category. 1. How to know if someone or something was attempting to access, disable, degrade, or destroy one or more of the devices and/or systems in the substation?

Book title: Cybersecurity Essentials - Charles J. Brooks Chapter 1 - Infrastructure security in the Real world From the information provided in the first scenario, consider the National Institute of Standards and Technology (NIST) functions detailed in this section and observe how they relate to each category. 1. How to know if someone or something was attempting to access, disable, degrade, or destroy one or more of the devices and/or systems in the substation?

Fundamentals of Information Systems

9th Edition

ISBN:9781337097536

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter3: Database Systems And Big Data

Section: Chapter Questions

Problem 5DQ

See similar textbooks

Similar questions

PurposeThis course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies.Learning Objectives and OutcomesSuccessful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this project, you will be able to do the following:Evaluate compliance laws relevant to the U.S. Department of Defense.Assess policy frameworks appropriate for an organization in a given scenario.Evaluate security controls and standards for the seven domains of a typical IT infrastructure.Develop DoD-compliant policies for an organization’s IT infrastructure.Required Source Information and ToolsWeb References: Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on January 4, 2022. The following tools and resources will be needed to complete this…
PurposeThis course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies.Learning Objectives and OutcomesSuccessful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this project, you will be able to do the following:Evaluate compliance laws relevant to the U.S. Department of Defense.Assess policy frameworks appropriate for an organization in a given scenario.Evaluate security controls and standards for the seven domains of a typical IT infrastructure.Develop DoD-compliant policies for an organization’s IT infrastructure.Required Source Information and ToolsWeb References: Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on January 4, 2022. The following tools and resources will be needed to complete this…
Question Design a case study involving a hypothetical cybersecurity scenario by using this outline 1. The various types of stakeholders potentially affected by the case, and the differentstakes/interests they have in the outcome.2. The different types of cybersecurity professionals or practitioners that might be involved in a case like this, and their specific responsibilities.3. The potential benefits and risks of harm that could be created by effective or ineffective cybersecurity practices in the case, including ‘downstream’ impacts. 4. The ethical challenges most relevant to this case 5. The ethical obligations to the public that such a case might entail for the cybersecurity professionals involved.6. Any potential in the case for disparate impacts on others, and how those impacts might affect the lives of different stakeholders7. The ethical best-case scenario (the best outcome for others that the cybersecurity practitioners involved could hope to secure from their practice)…
Book title: Cybersecurity Essentials - Charles J. Brooks Chapter 1 - Infrastructure security in the Real world From the information provided in the second scenario, consider the NIST functions detailed in this section and then write what to observe as they relate to each category. 2. Inventory creation sample of cyber assets (software platforms and applications) within the organization (NIST ID.AM-2). 3. Prioritize the organization’s assets based on their criticality or value to the business functions of the organization (NIST ID.BE-3). 4. Identify any assets that produce dependencies or provide critical functions for any of the organization’s critical services (NIST ID.BE-4).Create a risk assessment of asset vulnerabilities identified (NIST ID.RA-1, 3). (Refer to screenshot for reference)
Design a case study involving a hypothetical cybersecurity scenario by using this outline 1. The various types of stakeholders potentially affected by the case, and the differentstakes/interests they have in the outcome.2. The different types of cybersecurity professionals or practitioners that might be involved in a case like this, and their specific responsibilities.3. The potential benefits and risks of harm that could be created by effective or ineffective cybersecurity practices in the case, including ‘downstream’ impacts. 4. The ethical challenges most relevant to this case 5. The ethical obligations to the public that such a case might entail for the cybersecurity professionals involved.6. Any potential in the case for disparate impacts on others, and how those impacts might affect the lives of different stakeholders7. The ethical best-case scenario (the best outcome for others that the cybersecurity practitioners involved could hope to secure from their practice) and a…
The sole purpose of information security is securing the IT infrastructure and resources of an organization. Additionally, it supports the mission and the strategy of the business. When the management analyzes the security cycle, it needs to determine the acceptable and unacceptable security policies to ensure the effectiveness of the security controls. What do you think are the ways in which this can ensure the successful completion of a project?
Q1. Identify and discuss the various ways that Reconnaissance can be achieved by an attacker or a group of attackers in an Advanced Persistent Threat (APT) attack against Industrial Control Systems. Provide examples from known case studies. Q2. Identify the phases of the Cyber Kill Chain model and discuss the technical, management and operational security controls which can be adopted in each phase, such as IDS and AV. Discuss from known case studies how these controls could have mitigated the impact. Q3. Q4. This question is based on Appendix 1.Design an appropriate security architecture for the ICS provided above, following a defence-indepth approach. Focus only on the technical design (no need to include incident response, maintenance, training etc.). Your design should be based on logical assumptions about the security state of the system.
A security policy is a document that provides employees with clear instructions about acceptable use of company confidential information, explains how the company secures data resources and what it expects of the people who work with this information. Most importantly, the policy is designed with enough flexibility to be amended when necessary. You are working in organization X, and you are supposed to develop an issue-specific security policy, you can pick one issue from Table.1 [1] (In the photos) Your Task is: To develop the different sections of your policy and adequate procedure(s), you can refer to SANS Policy Templates [2]. References: [1] Developing an Information Security Policy: A Case Study Approach, Fayez Hussain Alqahtani. 4th Information Systems International Conference 2017, ISICO 2017, 6-8 November 2017, Bali, Indonesia. [2] https://www.sans.org/information-security-policy/
As a security officer, you have been asked to help the company's recruiting officer in the creation of a new job description. Employee recruitment security procedure that the business wants to use for all future recruiting reasons. Provide a succinct but thorough paper that must include the most critical security topics that the company must address. When it comes to hiring new personnel, this is what you should pay attention to.
The main goal of any IT security policy is to protect confidentiality, integrity, and availability (CIA) of data. One reason to have the BYOD security policy is to identify devices that introduce unnecessary vulnerabilities to the organization's computing resources. How is timely discovery of such vulnerabilities will reduce the attack vector on an organization's computing resources?
Both cyber security and network security rely heavily on auditing and log collection. Explaining the terms' professional context requires providing context through both definition and example.
The United States Air Force (USAF) recently announced that it will outsource "low-hanging" IT operations so that airmen are focused on Cyber Mission Defense teams. You work as a Security Analyst for IBM and have been asked to write a briefing on how your company can provide the IT products and services needed by the USAF that provide a layered, or Defense-in-depth, security architecture. Detail how your recommendations will meet the national strategy to deny, deter, deflect, delay and detect cyber-attacks.