You must find a news or journal article that is evidence that the problem or

  
You must find a news or journal article that is evidence that the problem or issue you wish to study is something current and of concern.
Please download and use this template. (Save it per the video “How to Save and Submit Assignments, in two formats. Submit the file from your computer.)
You MUST have a total of two proposals entered on this template.

Length 2-3pgs  Create the following section for Week 1: Security Management D

Length 2-3pgs 
Create the following section for Week 1:
Security Management Document shell

Use Word
Title page

Course number and name
Project name
Your name
Date

Table of Contents (TOC)

Use an autogenerated TOC.
This should be on a separate page.
This should be a maximum of 3 levels deep.
Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.

Section headings (create each heading on a new page with “TBD” as content, except for Week 1)

Week 1: Introduction to Information Security

Choose and describe the company that you will use in this scenario.
Describe the need for information security, what potential risks or issues exist, and what benefits the company can gain from the new project.
Describe what new challenges exist with the new project to allow consultants to work on-site.
What challenges now apply to the company with the recent IPO taking place?

Section 1 should be 2–3 pages long.
Name the document “CS651_FirstnameLastname_IP1.doc.”
{SEE BELOW FOR FUTURE COMPLETE INSTRUCTIONS}
Description
This Key Assignment (KA) template will be the basis for a Security Management Document. Although an actual plan is not feasible, each week will constitute portions of an overall Security Management Document that could be implemented.
Throughout this course, you will be working with a scenario in which some basic background information is provided about a consulting firm. This scenario and information is typical in many companies today. You are tasked to select a company that you are familiar with that is facing a similar situation. The company can be real or fictitious, but the framework and problems that it faces should be similar. The assignments that you complete each week are based on the problems and potential solutions that similar companies may face. The end goal for these assignments is to analyze the problems that the company faces with respect to the upcoming audit and to provide guidance on how it can provide security for its infrastructure.
The case study shows a company that is growing, and its security posture needs to be updated based on this growth. Based on the recent initial public offering (IPO), the company has new regulatory requirements that it must meet. To meet these requirements, a review of the current security must be conducted. This provides a chance to review the current security mechanisms and analyze the threats that the company could face. In addition, the company needs to expand its current network infrastructure to allow employees to work more efficiently but in a secure environment. What problems does the company currently face, and how does the expansion pose new threats?
Choose and describe the company that you will use in the scenario. Describe the need for information security, what potential issues and risks exist, and what benefits the company can gain from the new project. Describe what new challenges exist with the new project to allow consultants to work on-site. What challenges now apply to the company with respect to the recent IPO?
The template document should follow this format:
Security Management Document shell

Use Word
Title page

Course number and name
Project name
Your name
Date

Table of Contents (TOC)

Use an autogenerated TOC.
This should be on a separate page.
This should be a maximum of 3 levels deep.
Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.

Section headings (create each heading on a new page with “TBD” as content, except for Week 1)

Week 1: Introduction to Information Security

This section will describe the organization and establish the security model that it will use.

Week 2: Security Assessment

This section will focus on risks that are faced by organizations and how to deal with or safeguard against them.

Week 3: Access Controls and Security Mechanisms

This section examines how to control access and implement sound security controls to ensure restricted access to data.

Week 4: Security Policies, Procedures, and Regulatory Compliance

This section will focus on the protection of data and regulatory requirements that the company needs to implement.

Week 5: Network Security

This section combines all of the previous sections and gives the opportunity to examine the security mechanisms that are needed at the network level.

Create the following section for Week 1:

Week 1: Introduction to Information Security

Choose and describe the company that you will use in this scenario.
Describe the need for information security, what potential risks or issues exist, and what benefits the company can gain from the new project.
Describe what new challenges exist with the new project to allow consultants to work on-site.
What challenges now apply to the company with the recent IPO taking place?

Section 1 should be 2–3 pages long.
Name the document “CS651_FirstnameLastname_IP1.doc.”

  Do some Internet research on the pros and cons of a one-page website. There a

 
Do some Internet research on the pros and cons of a one-page website. There are pros and cons to both designs.
with this, share whether you believe a one-page website is the best option for a website. Be sure to provide support for your position with what you found in your research.
200-250 words

  If you are responsible for budgeting and expenditures for your company’s su

 
If you are responsible for budgeting and expenditures for your company’s subscriptions to Azure, how would you keep track of the costs and charges that are current?
If you need to make changes to any subscriptions, how can you do so?
200-250 words

 Class Project The purpose of this project is to gain familiarity and experience

 Class Project The purpose of this project is to gain familiarity and experience with a remotely-accessible services architecture running on the Linux platform. Web services are by far the most common  type of service offered in this manner. Aside from web pages that we visit through our  browsers, most connected mobile applications utilize a back-end web service as a means for  commuinication. These services typically expose an API which allows applications to submit  and request specific information. You may find yourself needing to deploy, assess, support or  design a large web application. Whether your role involves support of the server directly, the  network it resides on, or the security of the solution as a whole, understanding how the  services work is pivotal.  

 Project Part 01 – Risk Management Plan Outline and Research  For the first par

 Project Part 01 – Risk Management Plan Outline and Research 
For the first part of the assigned project, you will create a partial draft of the risk management plan. To do so, follow these steps:
Research risk management plans.
Create an outline for a basic risk management plan with anticipated section headings (as indicated in this numbered list). This plan will include a qualitative risk assessment, which is addressed later in the project.
Write an introduction to the plan by explaining its purpose and importance.
Define the scope and boundaries of the plan.
Research and summarize compliance laws and regulations that pertain to the organization. Keep track of sources you use for citation purposes.
Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk management.
Develop a proposed schedule for the risk management planning process.
Create a draft risk management plan detailing the information above. Format the plan similar to a professional business report and cite any sources you used.
Submission Requirements
Format: Microsoft Word (or compatible)
Font: Arial, size 12, double-space
Citation style: Your school’s preferred style guide
Estimated length: 4–6 pages

Purpose In this assignment, you will examine a volatile memory dump to investig

Purpose
In this assignment, you will examine a volatile memory dump to investigate a potential malware case. Your analysis will primarily be done with Volatility Workbench, but you may also use other utilities to look at the disk from other perspectives. In Autopsy, the evidence can be imported as an Unallocated Space image to run intake scripts. Be sure to make a note of all applications and methods you use in your examination.
Instructions
You’ll need to use the following resources to complete the assignment:
Investigation 04 Sample Evidence*
Volatility Workbench*
(Optional) Download and use the report template (See the Investigation and Forensics Challenge module for the templates)
(Optional) StringsLinks to an external site.
(Optional) Autopsy the open-source forensic suite* (or another suite, such as EnCase or FTK.)
*Accessed via the Virtual Lab.
After reading the Investigation 4 Scenario, open your forensic tool and import the sample evidence into the case. Begin a forensic report to document your examination.
Scenario
This scenario takes place circa 2010.
Company X has contacted you to perform forensics work on a recent incident that occurred. One of their employees had received an email from a fellow co-worker that pointed to a PDF file. Upon opening, the employee did not seem to notice anything. However, recently they have had unusual activity in their bank account.
Company X was able to obtain a memory image of the employee’s virtual machine upon suspected infection. Company X wishes you to analyze the virtual memory and report on any suspected activities found.
Questions
What specific indicators in the memory image indicate possible malicious activity?
Is there any evidence of malware execution or persistence mechanisms in the memory image? 
Is there any evidence of privilege escalation or unauthorized access to the memory image?
Is there any evidence of memory-resident malware or rootkits that could avoid traditional detection methods?
Was there any sensitive information, such as credentials or financial data, has been accessed or altered within the memory image? 
Are there any unusual processes or applications running in the virtual machine’s memory during the suspected infection?
Does the sender have any other unusual activities? 
What were the processes that were running on the employees computer? 
Format
You can submit your forensic report in Adobe PDF format. It should be a complete report. A template has been provided if you need help, but be aware that not all sections shown in the template will be relevant to this investigation:
Upload one file (PDF).
Your forensic report should include a cover page and a page dedicated to answering the accompanying questions at the end.
You may include screenshots or other evidence to support your conclusions, but a screenshot is not a shortcut to a complete report.
Grading and Submission
In brief, I’ll be evaluating you on the following:
Forensic Reporting
The report is complete and contains only the truth.
Examination Process
Your examination is fully documented and uses accepted practices.
Identifying Evidence
While you are not expected to find every relevant evidence item, you should discover enough to adequately support the conclusions in your report.