Security Breach Management and Prevention
Budget: $30 – $250 USD
You work as a security administrator of a large financial services organization. There has been a breach in security. An employee has stolen data using a personal laptop and a company-assigned computer. You review the logs from the IDS, remote access systems, and file servers and confirm the breach. Your employer wishes to gain access to the personal laptop used for the breach to determine the full extent of the data stolen. The employee’s lawyer claims that the laptop is not identifiable.
Create a memo/formal document to the CEO of the company to account for your findings, tools used to detect the breach, and what steps will be taken to prevent this type of breach from happening again. Use a search engine to research what a professional memo should look like. Spell and grammar check everything. Documents released to the public and sent to management reflect on the organization considerably.
Create a press release to the Public regarding this breach.
Create a Disaster Prevention and Recovery Plan (DRP) for the employees and vendors in case of a breach. You should consider prevention, detection, and correction in the plan. Topics must include:
Computer room environment (secure computer room with climate control, conditioned power and backup power, fire, flood, intentional break-in, etc.)
Hardware (networks, servers, desktop and laptop computers, wireless devices, and peripherals)
Connectivity to a service provider (fiber, cable, wireless, etc.)
Software applications (electronic data interchange, electronic mail, enterprise resource management, office productivity, etc.)
Data backup and restoration
Employee access, passwords, geolocation, time, etc.
The Memo, Press Release, and Disaster Recovery Plan will be turned in to the instructor as a part of the Final Project.
All three items must be turned in to receive a grade. A missing memo, press release, or DRP is an automatic zero for the entire project.
References must be included for all your work. Do not copy and paste. The DRP is worth 260 points, the memo and press release are worth 20 points each. This is a 400-point assignment - put an appropriate amount of effort into it!
Create a memo/formal document to the CEO of the company to account for your findings, tools used to detect the breach, and what steps will be taken to prevent this type of breach from happening again. Use a search engine to research what a professional memo should look like. Spell and grammar check everything. Documents released to the public and sent to management reflect on the organization considerably.
Create a press release to the Public regarding this breach.
Create a Disaster Prevention and Recovery Plan (DRP) for the employees and vendors in case of a breach. You should consider prevention, detection, and correction in the plan. Topics must include:
Computer room environment (secure computer room with climate control, conditioned power and backup power, fire, flood, intentional break-in, etc.)
Hardware (networks, servers, desktop and laptop computers, wireless devices, and peripherals)
Connectivity to a service provider (fiber, cable, wireless, etc.)
Software applications (electronic data interchange, electronic mail, enterprise resource management, office productivity, etc.)
Data backup and restoration
Employee access, passwords, geolocation, time, etc.
The Memo, Press Release, and Disaster Recovery Plan will be turned in to the instructor as a part of the Final Project.
All three items must be turned in to receive a grade. A missing memo, press release, or DRP is an automatic zero for the entire project.
References must be included for all your work. Do not copy and paste. The DRP is worth 260 points, the memo and press release are worth 20 points each. This is a 400-point assignment - put an appropriate amount of effort into it!