Emerging Threats And Countermeasures Paper.
This defense in depth discussion scenario is an intentional cybersecurity attack on the water utility’s SCADA system. It occurs during the fall after a dry summer in Fringe City. The water utility’s Information Technology (IT) person did not receive an expected pay raise and decides to reprogram the SCADA system to shut off the high-lift pumps.
The operator’s familiarity with the SCADA system allows him to reprogram the alarms that typically notify operators of a high-lift pump failure.Emerging Threats And Countermeasures Paper. In addition, he prevents access to the SCADA system by others. A wildfire breaks out on the outskirts of the city.
2)discuss what type(s) of new countermeasures should have been implemented to prevent the cyber attack described above from occurring. Be specific in recommending countermeasures for this scenario.
ORDER A CUSTOM-WRITTEN, PLAGIARISM-FREE PAPER HERE
2) Minimum of 300 words with 3 references( APA format)
Defining the Scope and Structure for an IT Risk Management Plan Course Name and Number: _____________________________________________________ Student Name: ________________________________________________________________ Instructor Name: ______________________________________________________________ Lab Due Date: ________________________________________________________________
Overview
In this lab, you defined the purpose of an IT risk management plan, you defined the scope for an IT risk management plan that encompasses the seven domains of a typical IT infrastructure, you related the risks, threats, and vulnerabilities to the plan, and you created an IT risk management plan outline that incorporates the five major parts of an IT risk management process.Emerging Threats And Countermeasures Paper.
Lab Assessment Questions & Answers
1. What is the goal or objective of an IT risk management plan?
2. What are the five fundamental components of an IT risk management plan?
3. Define what risk planning is.
4. What is the first step in performing risk management?
5. What is the exercise called when you are trying to gauge how significant a risk is?
6. What practice helps address a risk?
7. What ongoing practice helps track risk in real time?
8. True or False: Once a company completes all risk management steps (identification, assessment, response, and monitoring), the task is done. Emerging Threats And Countermeasures Paper.
9. Given that an IT risk management plan can be large in scope, why is it a good idea to develop a risk management plan team?
10. In the seven domains of a typical IT infrastructure, which domain is the most difficult to plan, identify, assess, treat, and monitor?
11. Which compliance laws or standards does the health care organization mentioned in the Hands- On Steps have to comply with (consider these: Health Insurance Portability and Accountability Act [HIPAA], Gramm-Leach-Bliley Act [GLBA], and Family Educational Rights and Privacy Act [FERPA])? How does this impact the scope and boundary of its IT risk management plan?
12. How did the risk identification and risk assessment of the identified risks, threats, and vulnerabilities contribute to your IT risk management plan outline?
13. What risks, threats, and vulnerabilities did you identify and assess that require immediate risk mitigation given the criticality of the threat or vulnerability?
14. For risk monitoring, what are some techniques or tools you can implement in each of the seven domains of a typical IT infrastructure to help mitigate risk?
15. For risk mitigation, what processes and procedures can help streamline and implement risk- mitigation solutions to the production IT infrastructure?
16. What is the purpose of a risk register? Emerging Threats And Countermeasures Paper.