Risk Mitigation Plan

  

Scenario

You are an IT security intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors. 

Company Products

Health Network has three main products: HNetExchange, HNetPay, and HNetConnect.

HNetExchange is the primary source of revenue for the company. This service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics.

HNetPay is a web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations.

HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and can update the information in their profile.

Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients can make payments and update their profiles using Internet-accessible HTTPS websites.

Information Technology Infrastructure Overview

Health Network operates in three production data centers that provide high availability across the company’s products. The data centers host about 1,000 production servers, and Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees.

Threats Identified

Upon review of the current risk management plan, the following threats were identified:

§ Loss of company data due to hardware being removed from production systems

§ Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops

§ Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so on

§ Internet threats due to company products being accessible on the Internet

§ Insider threats

§ Changes in regulatory landscape that may impact operations

Management Request

Senior management at Health Network has determined that the existing risk management plan for the organization is out of date and a new risk management plan must be developed. Because of the importance of risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan.

Additional threats other than those described previously may be discovered when re-evaluating the current threat landscape during the risk assessment phase.

The budget for this project has not been defined due to senior management’s desire to react to any and all material risks that are identified within the new plan. Given the company’s annual revenue, reasonable expectations can be determined.

Project: Risk Mitigation Plan 

Senior management at Health Network allocated funds to support a risk mitigation plan. They have requested that the risk manager and team create a plan in response to the deliverables produced within earlier phases of the project.

The risk mitigation plan should address the identified threats described in the scenario for this project, as well as any new threats that may have been discovered during the risk assessment. You have been assigned to develop a draft of this new plan. 

please read the following

 

David Doe is a network administrator for the ABC Company. David is passed over for promotion three times. He is quite vocal in his dissatisfaction with this situation. In fact, he begins to express negative opinions about the organization in general. Eventually, David quits and begins his own consulting business. Six months after David’s departure, it is discovered that a good deal of the ABC Company’s research has suddenly been duplicated by a competitor. Executives at ABC suspect that David Doe has done some consulting work for this competitor and may have passed on sensitive data. However, in the interim since David left, his computer has been formatted and reassigned to another person. ABC has no evidence that David Doe did anything wrong.

What steps might have been taken to detect David’s alleged industrial espionage?

What steps might have been taken to prevent his perpetrating such an offense?

Write your answer using a WORD document. Do your own work. Submit here. Note your Safe Assign score. Score must be less than 25 for full credit

ipsum

we need academic writers. we need technical writers who are good in python, c++, R language, java, html, and all types of languages. Kindly this is for technical tutors. We have a lot of tasks and all our payment are made after 16 days. our payment ranges from $7-10 for every page. send us an application to writingservice100 at g.com an we will send you our terms

HW2

Computer Science

Python

Complete the requirement for the attach

Due date: 06/20/2021

Wk 3 – Apply: Signature Assignment: Conduct and Present Project-Supporting Research (Rationale)

Project Plan is attached that was submitted last week.  It needs to be updated with 3 changes listed below.  Please read assignment entirely.  Needs to be based on Lowkey Inc and the plan attached.
 

For this assignment, you will compile research and create a supporting research report. Then, based on your research, you will identify and explain the rationale for three improvements to the project plan you submitted last week. I need the project plan updated and the Support Research Report filled out.  Two documents.

Compile additional research on your project’s industry, recommended technology vendors, and the categories presented in the supporting research report. You may want to include the Gartner Group and Forrester Research in your list of organizations to research.

Complete the Supporting Research Report template.

Create a second draft of your project plan. Highlight in yellow at least three changes you made to the network, database, and/or cloud solutions within the second draft based on the in-depth research you conducted this week and explain why you made the changes.

Submit your Supporting Research Report and second draft.

Database – Assignment

Produce an ER Model for the following scenario (presented in Step 1 below) and business need, for the Pythagoras Math Academy.  Reference the attached video (Course Project Ph2 Video.mp4), for a full introduction and demonstration and expectations for this project.Deliverables:

  • ER Model for the scenario presented. 
  • You have the option to use MS Visio (if you have the software) to produce your ER Model.  
  • Alternatively, if you do not have MS Visio, you can use the ERD PLUS (Open source ER Modeling Software) and produce your ER Model. 

Required Software:

  • MS Visio by Microsoft OR
  • ERD PLUS, Open Source Offering. This offering is cloud-based, and you do not need to download any clients. You will need to create an account (username and password), link to this offering follows: https://erdplus.com 

Lab Steps:Step 1: Read and understand the Scenario and Business needs presented below. Define and document the ENTITIES, and RELATIONSHIPS, required to address the business needs. The nouns in the scenario below will give the ENTITIES that you will need. Finally, the verbs will describe the RELATIONSHIPS.Scenario and Business Need The Pythagoras Math Academy is in need to develop a database to keep track and control of his students, teachers, and classes offered. Teachers are able to teach multiple courses. But they are required to be certified on the course they are teaching. For example, only a group of teachers are certified to teach Algebra, and other Geometry. Students can take multiple courses. Courses are taught by teachers with the proper certification and have multiple certs as needed.  Courses are taught in one of the classrooms at one of the School’s several sites.Each classroom is optimized to serve the needs for a course (for example some courses might require computer labs and whiteboards). The school needs to keep track of the math courses delivered in each of the sites.Step 2: For this project, you are required to use MS Visio or ERD PLUS to produce the deliverables.If you are using MS Visio follow the steps below:

  • Reference the Course Project Ph2 VIDEO.mp4, for a short demonstration and tutorial of this tool, and project overview/ expectations.
  • Open MS Visio
  • Click on the Software Database Template in the main window
  • Select the Database Model Diagram Template to open a new file.
  • Save the File and ensure to have in your file name PROJECT2_LastName_FistInitial.

If you are using ERD PLUS.

  • Watch the recorded short tutorial for this tool. Reference the attached video as follows: Course Project Ph2 VIDEO.mp4.
  • From the ERP PLUS main interface, select DOCUMENTS –> NEW DIAGRAM (NAME YOUR DIAGRAM) –>ER DIAGRAM –> CREATE
  • Reference demonstration video for how to navigate tool, how to create entities, add attributes, relationships, and Cordiality. Demonstration video attached as follows: Course Project Ph2 VIDEO.mp4

Step 3: Define and Database ENTITIES

  • Add an entity for each Table you identified in the Scenario and Business Need.
  • You will use the MS Visio tool, or the ERD PLUS open source offering to complete this step.

Step 4: ADD the required ENTITY ATTRIBUTES  

  • Add the required Attributes for each Entity that you feel would help to define each Entity as needed.
  • Select one of the attributes to be PRIMARY KEY (PK)

Step 5: Define RELATIONSHIPS

  • Use the Crow’s Feet Notation.
  • Reference recorded demonstrations on how to use these notations, for MS Visio and ERD PLUS. Reference attached video as follows: Course Project Ph2 VIDEO.mp4
  • Drag and drop (draw) relationships between the entities you defined.
  • Connect the ends to the two entities for each relation.
  • Defined the Primary Key for the parent entity.

Step 6: Define CARDINALITY RELATIONSHIPSet the cardinality for each of your relationships defined in Step 5.  For MS Visio: select a relationship line in the drawing area that is connecting two entities. In the Database Properties window, select the miscellaneous category. Select the cardinality for the selected relationship.Step 7: Upload your Work 

  • Save the File and ensure to have in your file name PROJECT2_LastName_FistInitial. 

Rubric:

  • 10 points: ER Model (MS Visio OR ERD PLUS)
  • 10 points: Entities: Minimum of Three entities are represented
  • 10 points: Attributes: Minimum of Two attributes for each Entity. Most would require more than two attributes, and I am only requiring two per entity.
  • 10 points: Relationships: Minimum Three relationships are presented.
  • 10 points: Cardinality is defined and specific for each relationship with Crow’s foot notation.

Link for video recording(Course Project Ph2 VIDEO.mp4.): https://learn-us-east-1-prod-fleet01-xythos.content.blackboardcdn.com/blackboard.learn.xythos.prod/5a31b16bb2c48/8377387?X-Blackboard-Expiration=1634979600000&X-Blackboard-Signature=yutQ0kaQpBHafLMHXirF5rkaAV6WhxTh%2Bog5LcZNtGM%3D&X-Blackboard-Client-Id=305918&response-cache-control=private%2C%20max-age%3D21600&response-content-disposition=inline%3B%20filename%2A%3DUTF-8%27%27Course%2520Project%2520Ph2%2520VIDEO%25282%2529.mp4&response-content-type=video%2Fmp4&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20211023T030000Z&X-Amz-SignedHeaders=host&X-Amz-Expires=21600&X-Amz-Credential=AKIAYDKQORRYTKBSBE4S%2F20211023%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=cf5c08cdcd08671fb7b8bf7ccbefdbe188a7d23ff447080b9271eafa32737648

Discussion 12- Project Risk

Chapter 14: Project RiskInitial Postings: Read and reflect on the assigned readings for the week. Then post what you thought was the most important concept(s), method(s), term(s), and/or any other thing that you felt was worthy of your understanding in each assigned textbook chapter.Your initial post should be based upon the assigned reading for the week, so the textbook should be a source listed in your reference section and cited within the body of the text. Other sources are not required but feel free to use them if they aid in your discussion.Also, provide a graduate-level response to each of the following questions:

  1. What are some examples of internal drivers of an organization’s risk culture? Resource allocation, risk attitude, risk appetite, risk tolerance, employee records
  2. What are some examples of external drivers of an organization’s risk culture? Political, social, economic, and technological 
  3. How can an organization’s risk management function create organizational value?
[Your post must be substantive and demonstrate insight gained from the course material. Postings must be in the student’s own words – do not provide quotes!] 

Text

Title: Managing Project Risks 

ISBN: 9781119489733 

Authors: Peter J. Edwards, Paulo Vaz Serra, Michael Edwards 

Publisher: John Wiley & Sons 

Publication Date: 2019-08-13

Emerging Technologies

 Write a Research paper on three of the following topics as it relates to or complements Systems Analysis and Design (SAD): 

> Descriptive, Predictive & Prescriptive Analytics (why SAD should consider Analytics) 

> Analytics Competencies Centers (Collaboration between Business Analysts, IT Specialists and Users) 

> Cloud Computing (PaaS, IaaS, SaaS, DaaS, AaaS) (how SAD is different for cloud solutions) 

> Hadoop and Advanced Data Management (data sources that may impact SAD) 

> Blockchains (how Blockchains impact SAD) . 

Your research paper must be at least 5 pages in length, double-spaced, 12 font, and include at least 5 references, at least 2 of which must be peer-reviewed. Your paper must be formatted using APA guidelines. Do not include a cover page. Do not include an abstract. The reference page is NOT included in the 4-page length requirement. 

The paper should include an Introduction (to include a Hypothesis based on the research), Literature Review (Evidence) and Analysis of the Literature. All references must be cited within the text. Since the paper includes multiple topics, each topic must be separated and start with a HEADING. Include a conclusion at the end of the paper to summarize the entire paper and analyze how each topic relates together as related to the use of Systems Analysis and Design.