For the first part of the assigned project, you will create a partial draft of the risk management plan. To do so, follow these steps:
Research risk management plans.
Create an outline for a basic risk management plan with anticipated section headings (as indicated in this numbered list). This plan will include a qualitative risk assessment, which is addressed later in the project.
Write an introduction to the plan by explaining its purpose and importance.
Define the scope and boundaries of the plan.
Research and summarize compliance laws and regulations that pertain to the organization. Keep track of sources you use for citation purposes.
Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk management.
Develop a proposed schedule for the risk management planning process.
Create a draft risk management plan detailing the information above. Format the plan similar to a professional business report and cite any sources you used.
Submission Requirements
Format: Microsoft Word (or compatible)
Font: Arial, size 12, double-space
Citation style: Your school’s preferred style guide
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals Research risk management plans.
After reading chapter 1, define the following terms risk, threat, vulnerability, asset, and impact of loss. After you define each term identify their role within an organizations secuirty posture. The initial post must be completed by Thursday at 11:59 eastern. You are also required to post a response to a minimum of two other student in the class by the end of the week. You must use at least one scholarly resource. Every discussion posting must be properly APA formatted.Your initial response is due by Thursday of each week of the course and you must respond to a minimum of two other learners during the week.Your responses to other students must be more than a simple “Good job” or “I agree with your post”. They must also not just be “Let me add to your post…” Instead, your responses to each other should do three things:1. Acknowledge the other student’s post with some form of recognition about what they posted2. Relate their posting to something you have learned or are familiar with3. Add to the conversation by asking additional questions about their post, or discussing their topic furtherRemember, this is a discussion forum. Your engagement with each other should be similar to how you would speak with each other if you were seated at the same table talking. Plagiarism in the discussion will not be tolerated.
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals risk, threat, vulnerability, asset, and impact of loss
1. (36 points) In �Commitment Problems in Emerging Democracies: The Case of Religious Parties,� Stathis Kalyvas (2000) examines whether reli- gious parties are compatible with secular and liberal democratic institu- tions. He concludes that religious parties may be compatible with democ- racy as long as they can credibly commit not to impose a theocratic dicta- torship when they come to power. He goes on to argue that some religions are better able to provide these credible commitments than others. We now provide a Religious Party Game that throws light on the credible commitment problem facing religious parties that Kalyvas describes.
The two players in our game are a dictatorial regime (Regime) that has recently introduced a process of democratization and a religious party (Religious Party) that seeks to gain power through the newly proposed democratic elections. The Religious Party is expected to win the elec- tions, and many fear that it will turn the country into a theocracy rather than continuing the process of democratic consolidation. The Regime has to decide whether to hold the elections as scheduled or to cancel them and retain power as a dictatorship. If elections are held and the Religious Party wins (which we are assuming will happen), then the Religious Party has to decide whether to pursue a moderate political agenda and support demo- cratic consolidation or to subvert the democratization process and create a religious regime. The Religious Party comes in two types-moderate and radical. One way to think about these types is that religious parties have both moderate and radical factions, and that whichever faction is dominant determines the Religious Party’s type. Moderate religious par- ties prefer democratic consolidation to establishing a theocracy, whereas radical religious parties prefer the opposite. There are three possible out- comes in this game: Continued dictatorship, Religious dictatorship, and Democratic consolidation. The �gure below illustrates an incomplete in- formation version of this game with cardinal payo�s in which the Regime does not know whether it is interacting with a moderate Religious Party or a radical Religious Party.
(a) Based on the cardinal payo�s shown in the �gure above, write down
Winter 2019
Comparative Politics Problem Set III
the preference ordering for (a) the Regime, (b) the moderate Reli- gious Party, and (c) the radical Religious Party over the three possible outcomes.
(b) Solve the subgame on the left, where the Religious Party is moder- ate, as if there were no uncertainty. What is the subgame perfect equilibrium? What is the expected outcome? What are the payo�s that each player receives?
(c) Solve the subgame on the right, where the Religious Party is radical, as if there were no uncertainty. What is the subgame perfect equi- librium? What is the expected outcome? What are the payo�s that each player receives?
(d) What is the expected payo� for the Regime from �Cancel elections�?
(e) What is the expected payo� for the Regime from �Hold elections�?
(f) Use the expected payo�s from the two previous questions to calcu- late the critical probability at which the Regime will choose to hold elections rather than cancel them.
(g) If the Regime believes that the Religious Party is moderate with a probability of 0.75, will it choose to hold elections, will it cancel elections, or will it be indi�erent between these two actions? Explain.
(h) If the Regime believes that the Religious Party is moderate with a probability of 0.8, will it choose to hold elections, will it cancel elections, or will it be indi�erent between these two actions? Explain.
(i) If the Regime believes that the Religious Party is moderate with a probability of 0.5, will it choose to hold elections, will it cancel elections, or will it be indi�erent between these two actions? Explain.
(j) If you represented a moderate religious party poised to win the elec- tions, would you want the Regime to believe that your party was moderate or radical?
(k) If you represented a radical religious party poised to win the elections, would you want the Regime to believe that your party was moderate or radical?
(l) If you solved the game correctly, you will �nd that the Regime will hold elections as long as it believes that the Religious Party is mod- erate with a high enough probability. If there is some uncertainty on the part of the Regime and you are representing a moderate re- ligious party that wants the elections to go ahead, why might it not be enough for you to simply announce to the Regime that your party is a moderate religious party and not a radical one?
2. (5 points) On September 17, 2011, protesters occupied Zuccotti Park in the �nancial district of New York as part of a movement that became known as �Occupy Wall Street� (OWS). Many of the protesters had been inspired by the popular uprisings that had occurred in Egypt and Tunisia in early 2011. The OWS protesters were opposed to what they perceived
Winter 2019
Comparative Politics Problem Set III
to be the undue in�uence of banks and multinational corporations on the political system. They believed that the wealthiest 1 percent of society had a disproportionate share of capital and political in�uence, and they used the slogan �We are the 99%� to highlight the problem of social and economic inequality. The OWS led to the creation of the international Occupy Movement, which has organized protests in dozens of countries around the world. The occupation of Zuccotti Park ended on November 15, 2011, when the protesters were forcibly removed by the police. Imagine that you are discussing issues of inequality and the power of the �nancial sector with some of the �Occupy Wall Street� protesters in the fall of 2011. How would you explain the implications of the structural dependence of the state on capital to someone who doesn’t understand why left-wing parties do not always �expropriate� the rich when they come to power?
3. (24 points) Rather than classify regimes as either democratic or dictato- rial, selectorate theory characterizes all regimes in regard to their location in a two-dimensional institutional space. One dimension is the size of the selectorate (S), and the second dimension is the size of the winning coalition (W). These two dimensions are graphically shown in Figure 10.9 along with the types of regimes that fall into each cell. Use Internet and other resources to determine into which cell of the two-dimensional space in the �gure belwo each of the following regimes should be placed. Explain your answers.
(a) Guinea Bissau
(b) Iraq under Saddam Hussein (pre-2003)
(c) The United States in 1776
(d) The United Arab Emirates
(e) Chile under Augusto Pinochet
(f) Argentina
Winter 2019
Comparative Politics Problem Set III
4. (21 points) Suppose that a political leader raises $1 billion in tax revenue. Assume that the leader can supply public goods worth $2,000 to each individual in society if he spends all of this tax revenue on providing public goods. Assume also that the size of the winning coalition is 250,000. With all of this in mind, answer the following questions.
(a) If the leader were to spend all of the tax revenue on providing private goods, what would the maximum value of the private goods be for each member of the winning coalition if we assume that they all receive the same amount?
(b) Would the leader prefer to provide only public goods or only private goods in this situation? Why?
(c) Now suppose that the size of the winning coalition is 750,000. Keep- ing everything else the same, answer the following questions.
(d) If the leader were to spend all of the tax revenue on providing private goods, what would the maximum value of the private goods be for each member of the winning coalition if we assume that they all receive the same amount?
(e) Would the leader prefer to provide only public goods or only private goods in this new situation? Why?
(f) Based on the answers you have given and the description of selec- torate theory in this chapter, why is providing public goods a more e�cient way for leaders in democracies to stay in power?
(g) Based on the answers you have given and the description of selec- torate theory in this chapter, why is providing private goods a more e�cient way for leaders in dictatorships to stay in power?
5. (16 points) In this chapter, we discussed the rules for classifying democ- racies as parliamentary, presidential, or semi-presidential. Look at the information from the following constitutions and decide whether these democracies are parliamentary, presidential, or semi-presidential. Explain your decision.
(a) 1991 Burkina Faso Constitution
• Article 37: The President of Faso is elected for �ve years by universal, direct, equal and secret su�rage. He is re-eligible one time.
• Article 46: The President of Faso appoints the Prime Minister from among the majority of the National Assembly and terminates his func- tions, either on the presentation by him of his resignation, or on his own authority in the superior interest of the Nation. On the pro- posal of the Prime Minister, he appoints the other members of the Government and terminates their functions.
• Article 62: The Government is responsible before the Parliament in the conditions and following the procedures speci�ed by this Consti- tution.
Winter 2019
Comparative Politics Problem Set III
• Article 114: The reciprocal relations of the National Assembly and of the Government are expressed equally by: the motion of censure; the question of con�dence; the dissolution of the National Assembly; the procedure of parliamentary discussion.
• Article 115: The National Assembly can present a motion of censure with regard to the Government. The motion of censure is signed by at least one-third of the Deputies of the Assembly. To be adopted, it must be voted by an absolute majority of the members composing the Assembly. In case of rejection of the motion of censure, its signatories may not present another before the time period of one year.
(b) 1937 Irish Constitution
i. Article 12: There shall be a President of Ireland (Uachtarán na hÉire- ann), hereinafter called the President, who shall take precedence over all other persons in the State and who shall exercise and perform the powers and functions conferred on the President by this Constitution and by law. The President shall be elected by direct vote of the people.
ii. Article 13: The President shall, on the nomination of the Dáil Éireann, appoint the Taoiseach, that is, the head of the Government or Prime Minister. The president shall, on the nomination of the Taoiseach with the previous approval of Dáil Éireann, appoint the other members of the Government. The President shall, on the advice of the Taoiseach, accept the resignation or terminate the appointment of any member of the Government. Dáil Éireann shall be summoned and dissolved by the President on the advice of the Taoiseach. The President may in his absolute discretion refuse to dissolve Dáil Éireann on the advice of a Taoiseach who has ceased to retain the support of a majority in Dáil Éireann. . . The President shall not be answerable to either House of the Oireachtas or to any court for the exercise and performance of the powers and functions of his o�ce or for any act done or purporting to be done by him in the exercise and performance of these powers and functions.
iii. Article 15: The National Parliament shall be called and known, and is in this Constitution generally referred to, as the Oireachtas. The Oireachtas shall consist of the President and two Houses, viz.: a House of Representatives to be called Dáil Éireann and a Senate to be called Seanad Éireann.
iv. Article 28: The Government shall consist of not less than seven and not more than �fteen members who shall be appointed by the Pres- ident in accordance with the provisions of this Constitution. . . The Government shall be responsible to the Dáil Éireann. The head of the government, or Prime Minister, shall be called, and is in this Consti- tution referred to as, the Taoiseach.
(c) 1980 Chilean Constitution
• Article 4: Chile is a democratic republic. • Article 24: The government and administration of the State are vested in the President of the Republic, who is the Chief of the State.
• Article 25: The President of the Republic shall hold o�ce for a term of eight years and may not be reelected for the consecutive period.
• Article 26: The President shall be elected by direct ballot, with an absolute majority of the votes validly cast.
• Article 32: The special powers vested in the President of the Republic are the following: . . . To appoint, and remove at will, Ministers of
Winter 2019
Comparative Politics Problem Set III
State, Undersecretaries, Intendants, Governors and Mayors appointed by him.
• Article 33: The Ministers of State are the direct and immediate col- laborators of the President of the Republic in governing and adminis- tering the State.
(d) 1947 Japanese Constitution
• Article 1: The Emperor shall be the symbol of the State and of the unit of the People, deriving his position from the will of the people with whom resides sovereign power.
• Article 4: The Emperor shall perform only such acts in matters of state as are provided in the Constitution, and he shall not have powers related to government.
• Article 6: The Emperor shall appoint the Prime Minister as desig- nated by the Diet.
• Article 41: The Diet shall be the highest organ of state power, and shall be the sole law-making organ of the State.
• Article 42: The Diet shall consist of two Houses, namely the House of Representatives and the House of Councillors.
• Article 65: Executive power shall be vested in the Cabinet. • Article 66: The Cabinet shall consist of the Prime Minister, who shall be its head, and other Ministers of State, as provided for by law. The Prime Minister and other Ministers of State must be civilians. The Cabinet, in the exercise of executive power, shall be collectively responsible to the Diet.
• Article 69: If the House of Representatives passes a non-con�dence resolution, or rejects a con�dence resolution, the Cabinet shall resign en masse, unless the House of Representatives is dissolved within ten (10) days.
6. (8 points) The table below shows the results from the 2016 legislative elections in South Korea.
(a) Based on the results, from which party would you expect the forma- teur to come if South Korea were a parliamentary democracy?
(b) South Korea is in fact a presidential democracy. In the 2012 presiden- tial elections, Park Geun-hye of the Saenuri Party (SP) was elected president, and following the 2016 legislative elections, she still had nearly two years left in her term. Based on this new information, from which party would you now expect the formateur to come? Why is this?
Winter 2019
Comparative Politics Problem Set III
7. (8 points) The table below shows the results from the Oslo district in the 2005 Norwegian elections. Answer the following questions. In all of these questions, you should ignore the �others� category.
(a) Copy the table. Imagine that the seventeen seats in Oslo are to be allocated according to the Hare quota with largest remainders. Fill in your table and indicate how Oslo’s seventeen seats are allocated among the parties. How many automatic, remainder, and total seats does each party obtain?
(b) Now make another table and repeat the process using the Droop quota with largest remainders. Does the allocation of seats change?
13: Elections and Electoral Systems 581
b. The Afghan electoral system has been heavily criticized by numerous actors. In a 2012 briefing paper written for an independent research institute based in Afghanistan, political scientists Andrew Reynolds and John Carey wrote that “The SNTV electoral system came about by a path of missteps and was a disservice to the millions of Afghans who deserved a clear and transparent tool to craft their first truly democratic parliament. If the system is retained for subsequent elections, there is every reason to believe that the fragmentation and parochialism of the legislature will continue, that the parliament as a whole will be ineffective in articulating and representing broad national interests, and that incumbents who strong-arm and bribe their way into office will thrive” (2012, 17). Explain the basis for Reynolds and Carey’s criticisms, focusing on the problems typically associated with SNTV electoral systems.
c. If you were designing an electoral system for Afghanistan, what would it be and why?
How Do Electoral Systems Work?
5. In Table 13.14 we again show the results from the Oslo district in the 2005 Norwegian elections. Answer the following questions. In all of these questions, you should ignore the “others” category.
a. Copy Table 13.14. Imagine that the seventeen seats in Oslo are to be allocated according to the Hare quota with largest remainders. Fill in your table and indicate how Oslo’s seventeen seats are allocated among the parties. How many automatic, remainder, and total seats does each party obtain?
Legislative Elections in Oslo, Norway, 2005 (Using Quota Systems)TaBle 13.14
8. (12 points) As we note in the chapter, the actual number of parties com- peting in an election or winning seats is not necessarily a good re�ection of �how big� a country’s party system is. As a result, political scientists often prefer to use a measure of the e�ective number of parties in a country to capture party system size. If you recall, the e�ective number of electoral
Winter 2019
Comparative Politics Problem Set III
parties when there are four actual parties is calculated as e�ective number of electoral parties = 1
v21+v 2 2+v
2 3+v
2 4 where v1 is the vote share of party 1, v2
is the vote share of party 2, and so on. The e�ective number of legislative parties when there are four actual parties is calculated as e�ective number of legislative parties = 1
s21+s 2 2+s
2 3+s
2 4 where s1 is the seat share of party 1,
s2 is the seat share of party 2, and so on. These measures can easily be adapted to cases in which there are more parties or fewer parties. For example, the general formulas for the e�ective number of parties are
1 P∑ 1 v2i
(1)
1 P∑ 1 s2i
(2)
where P is the total number of actual parties. The table below shows the results from the 2014 legislative elections in South Africa. As you can see, thirty parties won votes and thirteen parties won seats. This would seem to suggest that South Africa has a large multiparty system. Answer the following questions.
(a) What is the e�ective number of electoral parties in the 2014 South African elections? What is the e�ective number of legislative parties? (You will probably want to use a calculator for this.)
(b) Compare the e�ective numbers of electoral and legislative parties in these elections with the actual number of parties winning votes and seats. Which measure-the actual or e�ective number of parties-does a better job, in your opinion, of capturing the size of the South African party system? Why? Are there circumstances in which you would be more likely to use the actual number of parties as the measure of party system size? Are there circumstances in which you would be more likely to use the e�ective number of parties?
(c) Based on your answers to the previous questions and the information in the table, what do you think is the most accurate classi�cation of the South African party system: nonpartisan, single party, one-party dominant, two party, or multiparty?
(d) Based on the e�ective numbers of electoral and legislative parties that you calculated, does the mechanical e�ect of South Africa’s electoral system introduce much distortion in the way that votes are translated into seats? Based on your answer to this question, what type of electoral system do you think South Africa employs a permissive or nonpermissive one? Use Internet resources to �nd out whether South Africa really does use a permissive or a nonpermissive electoral system.
Winter 2019
Comparative Politics Problem Set III
Make sure you explain how you arrive at your solution � you won’t receive partial credit for incorrect answers unless we can see that you have done a part of the problem correctly. It is your responsibility to convey the answers in a clear and neat manner. Your TA may give you more precise instructions and is permitted to penalize you for sloppy presentation. The problem set is due at the beginning of class on March 13
Project 4: System Development or Application Assurance
Start Here
It is critical that cybersecurity professionals be able to use all applicable systems, tools, and concepts to minimize risks to an organization’s cyberspace and prevent cybersecurity incidents. In this project, you will demonstrate your understanding of how to apply security principles, methods, and tools within the software development life cycle. You will also apply your knowledge of the cybersecurity implications related to procurement and supply chain risk management.
This is the fourth and final project for this course. There are 13 steps in this project. Begin below to review your project scenario.
Transcript
Competencies
Your work will be evaluated using the competencies listed below.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Step 1: Assess Software Vulnerabilities
Project 2 outlined the steps involved to produce a final vulnerability and threat assessment, and Project 3 covered risk analysis and mitigation. Those assessments were across the entire enterprise and included numerous elements outside the realm of systems and technology. However, they did uncover opportunities for improvement in the application software processes.
For this step, return to the vulnerability and threat assessment from Project 2 and focus on all areas of application software that were itemized. Give additional thought to uncover software that perhaps did not make the list or were assumed to be secure and simply overlooked.
The assignment is to create a more comprehensive list of application software that could place the enterprise at risk of a breach, loss of data, loss of production, and/or loss of brand confidence.
The assessment should include the application of secure principles, development models such as the maturity model or integrated product and process development (IPPD), software development methods, libraries and toolsets used in the software development life cycle or systems development life cycle.
Use the Software Vulnerability Assessment Template to submit your results for feedback.
Submission for Project 4: Software Vulnerability Assessment
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will review your organization’s software procurement policy.
Step 2: Review Software Procurement Policy
Upon completion of the software specific vulnerability assessment, conduct a review of the organization’s software procurement policies for software development methods.
Note that there is no submitted assignment for this step. Your review will be used in the submission for the following steps.
When the review is complete, move to the next step, where you will create a table or spreadsheet that lists recommended policies for software procurement that address certain questions or concerns.
Step 3: Create a Software Procurement Policy List
You’ve reviewed the organization’s policies for software development methods. Now it’s time to create a policy list for software procurement. The following are some sample questions to be included in a software procurement policy:
• Does the vendor provide any cybersecurity certifications with the product?
• Does the vendor provide access to the source code for the product? Are there other security issues in source code to be addressed?
• What is the guaranteed frequency of security updates to be provided for the product?
• What is the implementation process for software updates/upgrades?
What are additional questions or concerns that should be included in the procurement process? Create a table or spreadsheet that lists recommended policies to properly address these questions or concerns.
Use the Procurement Policy Template to list the cybersecurity implications related to procurement and supply chain risk management and submit your results for feedback.
Submission for Project 4: Procurement Policy List
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will generate assurances or controls to address each of the policy issues identified here.
Now that the procurement policies have been identified in the previous step, what assurances or controls should be established as policy that would evaluate the security implications during the software acceptance process? The objective is to provide a one-page overview of security testing that would be included in the acceptance of a vendor’s application.
The next step in this project will document the actual testing and validation. This step is simply to verify the congruence between the procurement process and acceptance process. In other words, do the procurement policies establish the correct cyber security framework for software purchase and do the acceptance policies match?
In considering the security implications of the in the software acceptance phase of the development cycle, use the Software Acceptance Policy Template to document recommended tests and assurances for the procurement policies identified in the previous steps.
Submit your results below for feedback.
Submission for Project 4: Software Acceptance Policy
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will research software testing and validation.
Step 5: Research Software Testing and Validation Procedures
Based on the software acceptance policies created in the previous step, consider what testing and validation procedures could be used to assure compliance.
Note that there is no submitted assignment for this step. You will submit the final list of recommended testing and validation procedures in the next step.
Step 6: Document Software Testing and Validation Procedures
You’ve completed the research, and it is now time to create testing and validation procedures that follow a specific process to assure compliance. The key to the success of this step is to document exact procedures to be followed by a testing team prior to installation.
At a minimum, the procedures should address the following questions:
• What are potential vulnerabilities inherent in the application platform?
• How well does the vendor document preventive measures built into the application?
• Are there alternative solutions provided by the vendor or in the application in case of a breach?
• What additional safeguards can be added to ensure the security of the software environment?
The testing and validation procedures should address each of these concerns.
The executive team will want to see specific steps for the testing team to follow as the team members complete the tests and assurances you recommended in the previous step.
Document your specific testing and validation recommendations from a cybersecurity policy standpoint in the Test Script Procedures Template and submit for feedback.
Submission for Project 4: Test Script Procedures
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consider procedures for upgrading software.
Step 7: Review Software Upgrade Procedures
In the last step, you documented testing and validation requirements. In this step, it’s important to review software upgrades. Installation of a software upgrade has similar, yet unique requirements from the previous steps. In most enterprise environments, software updates and upgrades follow a specific change management routine. However, complete reliance on this procedure can lead to unintended oversight of cybersecurity issues. The change management process is generally focused on detecting errors and the auditing and logging of changes in the operational environment after the upgrade has been performed.
From the cyber perspective, this is not enough. As demonstrated in previous steps, significant effort is required to ensure a secure environment, not just an operational one. The question to be answered is “when” should the upgrade be performed during an application or system change. Should it be performed multiple times during the update?
Think through this issue thoroughly and make notes on your thought process. It is important that the risk analysis associated with an application or system change is conducted at the optimal time.
Note that there is no submitted assignment for this step. However, the research and corresponding notes related to this step will be applicable to the final report for Maria and the other executives. When this is complete, move to the next step, where supply chain risks will be considered.
Step 8: Review Supply Chain Risks
Following the previous steps relative to the supply chain and previous projects, it is time to thoroughly review risk within the supply chain.
Like many companies, your organization is dependent on a supply chain, so the software development process must include a supply chain risk management (SCRM) plan to minimize the impact of supply chain-related risks on business operations and the security of the infrastructures and data.
Note that there is no submitted assignment for this step. The identified supply chain risks will be reported in the next step.
Step 9: Document Supply Chain Risks
After review, it’s time to document supply chain risks. This portion of the overall report requires a two- to three-page narrative that addresses the following supply chain concerns:
1. Describe cybersecurity implications related to the procurement process.
2. Provide recommendations that would address these concerns.
3. Include appropriate supply chain risk management practices.
Where appropriate, cite references to support the assertions in the recommendations and conclusion.
Submit your report on supply chain concerns here for feedback.
Submission for Project 4: Supply Chain Cyber Security Risk Report
Previous submissions
0
Drop files here, or click below.
Add Files
Then, move to the next step, in which you will consider how the procedures of acquisition, procurement, and outsourcing line up in the organization.
Step 10: Consider Alignment Issues
Based on the review and recommendations on the supply chain described in the previous step, consider how well the policies and procedures regarding the acquisition, procurement, and outsourcing of software in your organization are aligned.
Outline a strategic approach to getting all the functions in alignment. There is no submission for this step. The alignment recommendations will be submitted in the next step.
Step 11: Develop an Acquisition Alignment Report
Keeping the alignment issues in mind from the previous step, prepare a one-page plan to align acquisition, procurement, and outsourcing of software applications for the enterprise. This should be a strategic approach to getting all the functions in alignment. Start with a request for information, proceed through acquisition, testing, and implementation, and finish with ongoing maintenance of the application.
All the work has been done in the previous steps. This step is designed to “bring it all together” in one easy-to-understand approach. The approach will be used in the final step to complete the supply chain analysis with a mitigation plan as it applies to software acquisition and maintenance.
Submit your one-page plan to align acquisition, procurement, and outsourcing efforts with your organization’s information security goals here for feedback.
Submission for Project 4: Acquisition Alignment Report
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consolidate all your work thus far.
Step 12: Consolidate Your Work
The acquisition plan alignment is complete. For this exercise, collate all the material presented in the previous steps into a cohesive presentation that describes the entire software risk analysis processes and articulates specific supply chain cybersecurity threats and the technologies and policies that can be used to mitigate them.
You will use your consolidated results in your final project submission in the next step.
Project 4: System Development or Application Assurance
Step 13: Write the Risk Analysis/Supply Chain Threats/Mitigation Report
Management is always interested in solutions, and Maria Sosa and the other executives at your company are no exception. In the case of cybersecurity, there are no absolute solutions to an ever-changing environment. However, there are steps to mitigation that might eliminate or minimize the results of certain vulnerabilities. This final step is to describe the mitigation strategies recommended as a result of all previous steps in the project.
The final report for the executive meeting should be five to seven pages, only one to two of which will have to be written in this step. The remainder is from all the previous steps in the project.
Use the Supply Chain Risk Mitigation Final Report Template to submit your specific testing and validation procedures.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Submission for Project 4: Supply Chain Risk Mitigation Final Report
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals Commitment Problems in Emerging Democracies: The Case of Religious Parties,� Stathis Kalyvas (2000)
Women’s Studies emerged in the academic community in conjunction with the second-wave feminist movement whose goal was to bring women from different backgrounds together and to become more knowledgeable of their experiences. The academic discipline of Women’s Studies started during the 1970s and it observes women’s lives from around the world. It focuses on how gender interconnects with other differences such as disability, class, age, ethnicity, race, and sex-orientation. Women’s studies is an interdisciplinary field and it examines gender as a social and cultural construct, the social status and contributions of women, and the relationships between power and gender. Women Studies disciplines consist of history, politics, literature, theory, psychology, and sociology. Literature is one of the most important disciplines in Women’s Studies. We rediscovering of old texts and while trying to understand the symbolism in the writings so that the women’s point of view can not be ignored or lost by the males point of view and contesting sexism in mainstream literature. Old literature during the first wave of feminism that I really admired while taking me World Lit Class was “A Room of Ones Own”, by Virginia Woolf. She spoke of how the only way for a woman to thrive in society during that time was to have her own home and maintain her own finances. The only reason she was able to maintain her own way of life was because her Aunt had passed and left her money. However other women had to rely on the finances of men.
Project 4: System Development or Application Assurance
Start Here
It is critical that cybersecurity professionals be able to use all applicable systems, tools, and concepts to minimize risks to an organization’s cyberspace and prevent cybersecurity incidents. In this project, you will demonstrate your understanding of how to apply security principles, methods, and tools within the software development life cycle. You will also apply your knowledge of the cybersecurity implications related to procurement and supply chain risk management.
This is the fourth and final project for this course. There are 13 steps in this project. Begin below to review your project scenario.
Transcript
Competencies
Your work will be evaluated using the competencies listed below.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Step 1: Assess Software Vulnerabilities
Project 2 outlined the steps involved to produce a final vulnerability and threat assessment, and Project 3 covered risk analysis and mitigation. Those assessments were across the entire enterprise and included numerous elements outside the realm of systems and technology. However, they did uncover opportunities for improvement in the application software processes.
For this step, return to the vulnerability and threat assessment from Project 2 and focus on all areas of application software that were itemized. Give additional thought to uncover software that perhaps did not make the list or were assumed to be secure and simply overlooked.
The assignment is to create a more comprehensive list of application software that could place the enterprise at risk of a breach, loss of data, loss of production, and/or loss of brand confidence.
The assessment should include the application of secure principles, development models such as the maturity model or integrated product and process development (IPPD), software development methods, libraries and toolsets used in the software development life cycle or systems development life cycle.
Use the Software Vulnerability Assessment Template to submit your results for feedback.
Submission for Project 4: Software Vulnerability Assessment
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will review your organization’s software procurement policy.
Step 2: Review Software Procurement Policy
Upon completion of the software specific vulnerability assessment, conduct a review of the organization’s software procurement policies for software development methods.
Note that there is no submitted assignment for this step. Your review will be used in the submission for the following steps.
When the review is complete, move to the next step, where you will create a table or spreadsheet that lists recommended policies for software procurement that address certain questions or concerns.
Step 3: Create a Software Procurement Policy List
You’ve reviewed the organization’s policies for software development methods. Now it’s time to create a policy list for software procurement. The following are some sample questions to be included in a software procurement policy:
• Does the vendor provide any cybersecurity certifications with the product?
• Does the vendor provide access to the source code for the product? Are there other security issues in source code to be addressed?
• What is the guaranteed frequency of security updates to be provided for the product?
• What is the implementation process for software updates/upgrades?
What are additional questions or concerns that should be included in the procurement process? Create a table or spreadsheet that lists recommended policies to properly address these questions or concerns.
Use the Procurement Policy Template to list the cybersecurity implications related to procurement and supply chain risk management and submit your results for feedback.
Submission for Project 4: Procurement Policy List
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will generate assurances or controls to address each of the policy issues identified here.
Now that the procurement policies have been identified in the previous step, what assurances or controls should be established as policy that would evaluate the security implications during the software acceptance process? The objective is to provide a one-page overview of security testing that would be included in the acceptance of a vendor’s application.
The next step in this project will document the actual testing and validation. This step is simply to verify the congruence between the procurement process and acceptance process. In other words, do the procurement policies establish the correct cyber security framework for software purchase and do the acceptance policies match?
In considering the security implications of the in the software acceptance phase of the development cycle, use the Software Acceptance Policy Template to document recommended tests and assurances for the procurement policies identified in the previous steps.
Submit your results below for feedback.
Submission for Project 4: Software Acceptance Policy
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will research software testing and validation.
Step 5: Research Software Testing and Validation Procedures
Based on the software acceptance policies created in the previous step, consider what testing and validation procedures could be used to assure compliance.
Note that there is no submitted assignment for this step. You will submit the final list of recommended testing and validation procedures in the next step.
Step 6: Document Software Testing and Validation Procedures
You’ve completed the research, and it is now time to create testing and validation procedures that follow a specific process to assure compliance. The key to the success of this step is to document exact procedures to be followed by a testing team prior to installation.
At a minimum, the procedures should address the following questions:
• What are potential vulnerabilities inherent in the application platform?
• How well does the vendor document preventive measures built into the application?
• Are there alternative solutions provided by the vendor or in the application in case of a breach?
• What additional safeguards can be added to ensure the security of the software environment?
The testing and validation procedures should address each of these concerns.
The executive team will want to see specific steps for the testing team to follow as the team members complete the tests and assurances you recommended in the previous step.
Document your specific testing and validation recommendations from a cybersecurity policy standpoint in the Test Script Procedures Template and submit for feedback.
Submission for Project 4: Test Script Procedures
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consider procedures for upgrading software.
Step 7: Review Software Upgrade Procedures
In the last step, you documented testing and validation requirements. In this step, it’s important to review software upgrades. Installation of a software upgrade has similar, yet unique requirements from the previous steps. In most enterprise environments, software updates and upgrades follow a specific change management routine. However, complete reliance on this procedure can lead to unintended oversight of cybersecurity issues. The change management process is generally focused on detecting errors and the auditing and logging of changes in the operational environment after the upgrade has been performed.
From the cyber perspective, this is not enough. As demonstrated in previous steps, significant effort is required to ensure a secure environment, not just an operational one. The question to be answered is “when” should the upgrade be performed during an application or system change. Should it be performed multiple times during the update?
Think through this issue thoroughly and make notes on your thought process. It is important that the risk analysis associated with an application or system change is conducted at the optimal time.
Note that there is no submitted assignment for this step. However, the research and corresponding notes related to this step will be applicable to the final report for Maria and the other executives. When this is complete, move to the next step, where supply chain risks will be considered.
Step 8: Review Supply Chain Risks
Following the previous steps relative to the supply chain and previous projects, it is time to thoroughly review risk within the supply chain.
Like many companies, your organization is dependent on a supply chain, so the software development process must include a supply chain risk management (SCRM) plan to minimize the impact of supply chain-related risks on business operations and the security of the infrastructures and data.
Note that there is no submitted assignment for this step. The identified supply chain risks will be reported in the next step.
Step 9: Document Supply Chain Risks
After review, it’s time to document supply chain risks. This portion of the overall report requires a two- to three-page narrative that addresses the following supply chain concerns:
1. Describe cybersecurity implications related to the procurement process.
2. Provide recommendations that would address these concerns.
3. Include appropriate supply chain risk management practices.
Where appropriate, cite references to support the assertions in the recommendations and conclusion.
Submit your report on supply chain concerns here for feedback.
Submission for Project 4: Supply Chain Cyber Security Risk Report
Previous submissions
0
Drop files here, or click below.
Add Files
Then, move to the next step, in which you will consider how the procedures of acquisition, procurement, and outsourcing line up in the organization.
Step 10: Consider Alignment Issues
Based on the review and recommendations on the supply chain described in the previous step, consider how well the policies and procedures regarding the acquisition, procurement, and outsourcing of software in your organization are aligned.
Outline a strategic approach to getting all the functions in alignment. There is no submission for this step. The alignment recommendations will be submitted in the next step.
Step 11: Develop an Acquisition Alignment Report
Keeping the alignment issues in mind from the previous step, prepare a one-page plan to align acquisition, procurement, and outsourcing of software applications for the enterprise. This should be a strategic approach to getting all the functions in alignment. Start with a request for information, proceed through acquisition, testing, and implementation, and finish with ongoing maintenance of the application.
All the work has been done in the previous steps. This step is designed to “bring it all together” in one easy-to-understand approach. The approach will be used in the final step to complete the supply chain analysis with a mitigation plan as it applies to software acquisition and maintenance.
Submit your one-page plan to align acquisition, procurement, and outsourcing efforts with your organization’s information security goals here for feedback.
Submission for Project 4: Acquisition Alignment Report
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consolidate all your work thus far.
Step 12: Consolidate Your Work
The acquisition plan alignment is complete. For this exercise, collate all the material presented in the previous steps into a cohesive presentation that describes the entire software risk analysis processes and articulates specific supply chain cybersecurity threats and the technologies and policies that can be used to mitigate them.
You will use your consolidated results in your final project submission in the next step.
Project 4: System Development or Application Assurance
Step 13: Write the Risk Analysis/Supply Chain Threats/Mitigation Report
Management is always interested in solutions, and Maria Sosa and the other executives at your company are no exception. In the case of cybersecurity, there are no absolute solutions to an ever-changing environment. However, there are steps to mitigation that might eliminate or minimize the results of certain vulnerabilities. This final step is to describe the mitigation strategies recommended as a result of all previous steps in the project.
The final report for the executive meeting should be five to seven pages, only one to two of which will have to be written in this step. The remainder is from all the previous steps in the project.
Use the Supply Chain Risk Mitigation Final Report Template to submit your specific testing and validation procedures.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Submission for Project 4: Supply Chain Risk Mitigation Final Report
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals did Women’s Studies emerge in the academic community? Why are Women’s Studies programs inherently interdisciplinary?
Read/review the following resources for this activity:
Textbook: Chapter 6, 10
Magstadt, T. M. (2017). Understanding politics: Ideas, institutions, and issues. Australia: Cengage Learning.
Lesson
Instructions
Aristotle defined tyranny as an illegitimate form of government by one individual that tightly controlled every part of life and government. Adolf Hitler is the most notorious tyrant. Using a totalitarian society from the past or present, discuss how the state and its leader attempt to impede citizens from exercising their rights. In your discussion, explain some components of an “ideal citizen,” consequences of voter apathy, and ways the state controls the citizen.
Writing Requirements (APA format)
Length: 1.5-2 pages (not including title page or references page)
1-inch margins
Double spaced
12-point Times New Roman font
Title page
References page (minimum of 2 scholarly sources)
Grading
This activity will be graded based on the essay rubric.
Course Outcomes (CO): 1
Due Date: By 11:59 p.m. MT on Sunday
Rubric
Week 5 Assignment: Essay – Ideal Citizen in a Totalitarian Government
Week 5 Assignment: Essay – Ideal Citizen in a Totalitarian Government
Criteria RatingsPts
This criterion is linked to a Learning Outcome Actual case study of a country.
20.0 pts
Uses a historical or contemporary example of a totalitarian country
16.0 pts
There is a totalitarian country, but it is not real.
12.0 pts
There is a country, but it is not totalitarian.
0.0 pts
There is no country mentioned.
20.0 pts
This criterion is linked to a Learning Outcome Control by a totalitarian leader
20.0 pts
Describes the three ways, violence, propaganda, and scapegoating, that leaders use to keep control in the country.
16.0 pts
Only two of the tactics of totalitarian leaders are described.
12.0 pts
Only one of the tactics of totalitarian leaders are described.
0.0 pts
How a totalitarian leaders keeps control is not addressed.
20.0 pts
This criterion is linked to a Learning Outcome Citizens in the country.
20.0 pts
States and describes two ways of stopping a totalitarian regime by using political socialization, civil disobedience, resist propaganda. Discusses voter apathy.
16.0 pts
States and describes one way of stopping a totalitarian regime by using political socialization, civil disobedience, resist propaganda. Discusses voter apathy.
12.0 pts
States and describes one way of stopping a totalitarian regime by using political socialization, civil disobedience, resist propaganda. Does not discuss voter apathy.
0.0 pts
Does not address the concepts.
20.0 pts
This criterion is linked to a Learning Outcome Scholarly resources
10.0 pts
Uses both the book and, at least, one outside scholarly source.
8.0 pts
Uses only the book or a scholarly source.
6.0 pts
Uses only a scholarly source and the source is not scholarly.
0.0 pts
Does not use the book or scholarly source.
10.0 pts
This criterion is linked to a Learning Outcome APA
5.0 pts
All sources are properly cited and referenced according to APA standards.
4.0 pts
Sources are either properly cited or referenced, missing one of those elements.
3.0 pts
The citation and/or reference are incorrect.
0.0 pts
No APA format was used.
5.0 pts
This criterion is linked to a Learning Outcome Writing
5.0 pts
Presents information using clear and concise language in an organized manner (minimal errors in English grammar, spelling, syntax, and punctuation).
4.0 pts
Presents information using understandable language but is somewhat disorganized (some errors in English grammar, spelling, syntax, and punctuation).
3.0 pts
Presents information using understandable language but is very disorganized (many errors in English grammar, spelling, syntax, and punctuation).
0.0 pts
Presents information that is not clear, logical, professional or organized to the point that the reader has difficulty understanding the message (numerous errors in English grammar, spelling, syntax, and/or punctuation).
5.0 pts
Project 4: System Development or Application Assurance
Start Here
It is critical that cybersecurity professionals be able to use all applicable systems, tools, and concepts to minimize risks to an organization’s cyberspace and prevent cybersecurity incidents. In this project, you will demonstrate your understanding of how to apply security principles, methods, and tools within the software development life cycle. You will also apply your knowledge of the cybersecurity implications related to procurement and supply chain risk management.
This is the fourth and final project for this course. There are 13 steps in this project. Begin below to review your project scenario.
Transcript
Competencies
Your work will be evaluated using the competencies listed below.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Step 1: Assess Software Vulnerabilities
Project 2 outlined the steps involved to produce a final vulnerability and threat assessment, and Project 3 covered risk analysis and mitigation. Those assessments were across the entire enterprise and included numerous elements outside the realm of systems and technology. However, they did uncover opportunities for improvement in the application software processes.
For this step, return to the vulnerability and threat assessment from Project 2 and focus on all areas of application software that were itemized. Give additional thought to uncover software that perhaps did not make the list or were assumed to be secure and simply overlooked.
The assignment is to create a more comprehensive list of application software that could place the enterprise at risk of a breach, loss of data, loss of production, and/or loss of brand confidence.
The assessment should include the application of secure principles, development models such as the maturity model or integrated product and process development (IPPD), software development methods, libraries and toolsets used in the software development life cycle or systems development life cycle.
Use the Software Vulnerability Assessment Template to submit your results for feedback.
Submission for Project 4: Software Vulnerability Assessment
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will review your organization’s software procurement policy.
Step 2: Review Software Procurement Policy
Upon completion of the software specific vulnerability assessment, conduct a review of the organization’s software procurement policies for software development methods.
Note that there is no submitted assignment for this step. Your review will be used in the submission for the following steps.
When the review is complete, move to the next step, where you will create a table or spreadsheet that lists recommended policies for software procurement that address certain questions or concerns.
Step 3: Create a Software Procurement Policy List
You’ve reviewed the organization’s policies for software development methods. Now it’s time to create a policy list for software procurement. The following are some sample questions to be included in a software procurement policy:
• Does the vendor provide any cybersecurity certifications with the product?
• Does the vendor provide access to the source code for the product? Are there other security issues in source code to be addressed?
• What is the guaranteed frequency of security updates to be provided for the product?
• What is the implementation process for software updates/upgrades?
What are additional questions or concerns that should be included in the procurement process? Create a table or spreadsheet that lists recommended policies to properly address these questions or concerns.
Use the Procurement Policy Template to list the cybersecurity implications related to procurement and supply chain risk management and submit your results for feedback.
Submission for Project 4: Procurement Policy List
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will generate assurances or controls to address each of the policy issues identified here.
Now that the procurement policies have been identified in the previous step, what assurances or controls should be established as policy that would evaluate the security implications during the software acceptance process? The objective is to provide a one-page overview of security testing that would be included in the acceptance of a vendor’s application.
The next step in this project will document the actual testing and validation. This step is simply to verify the congruence between the procurement process and acceptance process. In other words, do the procurement policies establish the correct cyber security framework for software purchase and do the acceptance policies match?
In considering the security implications of the in the software acceptance phase of the development cycle, use the Software Acceptance Policy Template to document recommended tests and assurances for the procurement policies identified in the previous steps.
Submit your results below for feedback.
Submission for Project 4: Software Acceptance Policy
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will research software testing and validation.
Step 5: Research Software Testing and Validation Procedures
Based on the software acceptance policies created in the previous step, consider what testing and validation procedures could be used to assure compliance.
Note that there is no submitted assignment for this step. You will submit the final list of recommended testing and validation procedures in the next step.
Step 6: Document Software Testing and Validation Procedures
You’ve completed the research, and it is now time to create testing and validation procedures that follow a specific process to assure compliance. The key to the success of this step is to document exact procedures to be followed by a testing team prior to installation.
At a minimum, the procedures should address the following questions:
• What are potential vulnerabilities inherent in the application platform?
• How well does the vendor document preventive measures built into the application?
• Are there alternative solutions provided by the vendor or in the application in case of a breach?
• What additional safeguards can be added to ensure the security of the software environment?
The testing and validation procedures should address each of these concerns.
The executive team will want to see specific steps for the testing team to follow as the team members complete the tests and assurances you recommended in the previous step.
Document your specific testing and validation recommendations from a cybersecurity policy standpoint in the Test Script Procedures Template and submit for feedback.
Submission for Project 4: Test Script Procedures
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consider procedures for upgrading software.
Step 7: Review Software Upgrade Procedures
In the last step, you documented testing and validation requirements. In this step, it’s important to review software upgrades. Installation of a software upgrade has similar, yet unique requirements from the previous steps. In most enterprise environments, software updates and upgrades follow a specific change management routine. However, complete reliance on this procedure can lead to unintended oversight of cybersecurity issues. The change management process is generally focused on detecting errors and the auditing and logging of changes in the operational environment after the upgrade has been performed.
From the cyber perspective, this is not enough. As demonstrated in previous steps, significant effort is required to ensure a secure environment, not just an operational one. The question to be answered is “when” should the upgrade be performed during an application or system change. Should it be performed multiple times during the update?
Think through this issue thoroughly and make notes on your thought process. It is important that the risk analysis associated with an application or system change is conducted at the optimal time.
Note that there is no submitted assignment for this step. However, the research and corresponding notes related to this step will be applicable to the final report for Maria and the other executives. When this is complete, move to the next step, where supply chain risks will be considered.
Step 8: Review Supply Chain Risks
Following the previous steps relative to the supply chain and previous projects, it is time to thoroughly review risk within the supply chain.
Like many companies, your organization is dependent on a supply chain, so the software development process must include a supply chain risk management (SCRM) plan to minimize the impact of supply chain-related risks on business operations and the security of the infrastructures and data.
Note that there is no submitted assignment for this step. The identified supply chain risks will be reported in the next step.
Step 9: Document Supply Chain Risks
After review, it’s time to document supply chain risks. This portion of the overall report requires a two- to three-page narrative that addresses the following supply chain concerns:
1. Describe cybersecurity implications related to the procurement process.
2. Provide recommendations that would address these concerns.
3. Include appropriate supply chain risk management practices.
Where appropriate, cite references to support the assertions in the recommendations and conclusion.
Submit your report on supply chain concerns here for feedback.
Submission for Project 4: Supply Chain Cyber Security Risk Report
Previous submissions
0
Drop files here, or click below.
Add Files
Then, move to the next step, in which you will consider how the procedures of acquisition, procurement, and outsourcing line up in the organization.
Step 10: Consider Alignment Issues
Based on the review and recommendations on the supply chain described in the previous step, consider how well the policies and procedures regarding the acquisition, procurement, and outsourcing of software in your organization are aligned.
Outline a strategic approach to getting all the functions in alignment. There is no submission for this step. The alignment recommendations will be submitted in the next step.
Step 11: Develop an Acquisition Alignment Report
Keeping the alignment issues in mind from the previous step, prepare a one-page plan to align acquisition, procurement, and outsourcing of software applications for the enterprise. This should be a strategic approach to getting all the functions in alignment. Start with a request for information, proceed through acquisition, testing, and implementation, and finish with ongoing maintenance of the application.
All the work has been done in the previous steps. This step is designed to “bring it all together” in one easy-to-understand approach. The approach will be used in the final step to complete the supply chain analysis with a mitigation plan as it applies to software acquisition and maintenance.
Submit your one-page plan to align acquisition, procurement, and outsourcing efforts with your organization’s information security goals here for feedback.
Submission for Project 4: Acquisition Alignment Report
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consolidate all your work thus far.
Step 12: Consolidate Your Work
The acquisition plan alignment is complete. For this exercise, collate all the material presented in the previous steps into a cohesive presentation that describes the entire software risk analysis processes and articulates specific supply chain cybersecurity threats and the technologies and policies that can be used to mitigate them.
You will use your consolidated results in your final project submission in the next step.
Project 4: System Development or Application Assurance
Step 13: Write the Risk Analysis/Supply Chain Threats/Mitigation Report
Management is always interested in solutions, and Maria Sosa and the other executives at your company are no exception. In the case of cybersecurity, there are no absolute solutions to an ever-changing environment. However, there are steps to mitigation that might eliminate or minimize the results of certain vulnerabilities. This final step is to describe the mitigation strategies recommended as a result of all previous steps in the project.
The final report for the executive meeting should be five to seven pages, only one to two of which will have to be written in this step. The remainder is from all the previous steps in the project.
Use the Supply Chain Risk Mitigation Final Report Template to submit your specific testing and validation procedures.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Submission for Project 4: Supply Chain Risk Mitigation Final Report
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals Aristotle defined tyranny as an illegitimate form of government by one individual that tightly controlled every part of life and government.
Apply intervention strategies to address Marge’s addiction and you consider potential ethical dilemmas related to the intervention.
Using the Johnson Model, design an intervention as it might have occurred six weeks prior to Marge’s admission into treatment. Include the following:
Describe some of the people who might participate in the intervention. Provide a rationale for including these individuals.
Describe the qualified professional to guide the process. Explain why this person would be qualified.
Explain the preparation process prior to Marge’s intervention.
Provide three examples of strategies that participants might take in Marge’s intervention.
Describe three potential sanctions that participants might employ if Marge refuses treatment.
Explain any ethical dilemmas that might arise from Marge’s intervention.
Please see Guideline attachmen
Project 4: System Development or Application Assurance
Start Here
It is critical that cybersecurity professionals be able to use all applicable systems, tools, and concepts to minimize risks to an organization’s cyberspace and prevent cybersecurity incidents. In this project, you will demonstrate your understanding of how to apply security principles, methods, and tools within the software development life cycle. You will also apply your knowledge of the cybersecurity implications related to procurement and supply chain risk management.
This is the fourth and final project for this course. There are 13 steps in this project. Begin below to review your project scenario.
Transcript
Competencies
Your work will be evaluated using the competencies listed below.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Step 1: Assess Software Vulnerabilities
Project 2 outlined the steps involved to produce a final vulnerability and threat assessment, and Project 3 covered risk analysis and mitigation. Those assessments were across the entire enterprise and included numerous elements outside the realm of systems and technology. However, they did uncover opportunities for improvement in the application software processes.
For this step, return to the vulnerability and threat assessment from Project 2 and focus on all areas of application software that were itemized. Give additional thought to uncover software that perhaps did not make the list or were assumed to be secure and simply overlooked.
The assignment is to create a more comprehensive list of application software that could place the enterprise at risk of a breach, loss of data, loss of production, and/or loss of brand confidence.
The assessment should include the application of secure principles, development models such as the maturity model or integrated product and process development (IPPD), software development methods, libraries and toolsets used in the software development life cycle or systems development life cycle.
Use the Software Vulnerability Assessment Template to submit your results for feedback.
Submission for Project 4: Software Vulnerability Assessment
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will review your organization’s software procurement policy.
Step 2: Review Software Procurement Policy
Upon completion of the software specific vulnerability assessment, conduct a review of the organization’s software procurement policies for software development methods.
Note that there is no submitted assignment for this step. Your review will be used in the submission for the following steps.
When the review is complete, move to the next step, where you will create a table or spreadsheet that lists recommended policies for software procurement that address certain questions or concerns.
Step 3: Create a Software Procurement Policy List
You’ve reviewed the organization’s policies for software development methods. Now it’s time to create a policy list for software procurement. The following are some sample questions to be included in a software procurement policy:
• Does the vendor provide any cybersecurity certifications with the product?
• Does the vendor provide access to the source code for the product? Are there other security issues in source code to be addressed?
• What is the guaranteed frequency of security updates to be provided for the product?
• What is the implementation process for software updates/upgrades?
What are additional questions or concerns that should be included in the procurement process? Create a table or spreadsheet that lists recommended policies to properly address these questions or concerns.
Use the Procurement Policy Template to list the cybersecurity implications related to procurement and supply chain risk management and submit your results for feedback.
Submission for Project 4: Procurement Policy List
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will generate assurances or controls to address each of the policy issues identified here.
Now that the procurement policies have been identified in the previous step, what assurances or controls should be established as policy that would evaluate the security implications during the software acceptance process? The objective is to provide a one-page overview of security testing that would be included in the acceptance of a vendor’s application.
The next step in this project will document the actual testing and validation. This step is simply to verify the congruence between the procurement process and acceptance process. In other words, do the procurement policies establish the correct cyber security framework for software purchase and do the acceptance policies match?
In considering the security implications of the in the software acceptance phase of the development cycle, use the Software Acceptance Policy Template to document recommended tests and assurances for the procurement policies identified in the previous steps.
Submit your results below for feedback.
Submission for Project 4: Software Acceptance Policy
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will research software testing and validation.
Step 5: Research Software Testing and Validation Procedures
Based on the software acceptance policies created in the previous step, consider what testing and validation procedures could be used to assure compliance.
Note that there is no submitted assignment for this step. You will submit the final list of recommended testing and validation procedures in the next step.
Step 6: Document Software Testing and Validation Procedures
You’ve completed the research, and it is now time to create testing and validation procedures that follow a specific process to assure compliance. The key to the success of this step is to document exact procedures to be followed by a testing team prior to installation.
At a minimum, the procedures should address the following questions:
• What are potential vulnerabilities inherent in the application platform?
• How well does the vendor document preventive measures built into the application?
• Are there alternative solutions provided by the vendor or in the application in case of a breach?
• What additional safeguards can be added to ensure the security of the software environment?
The testing and validation procedures should address each of these concerns.
The executive team will want to see specific steps for the testing team to follow as the team members complete the tests and assurances you recommended in the previous step.
Document your specific testing and validation recommendations from a cybersecurity policy standpoint in the Test Script Procedures Template and submit for feedback.
Submission for Project 4: Test Script Procedures
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consider procedures for upgrading software.
Step 7: Review Software Upgrade Procedures
In the last step, you documented testing and validation requirements. In this step, it’s important to review software upgrades. Installation of a software upgrade has similar, yet unique requirements from the previous steps. In most enterprise environments, software updates and upgrades follow a specific change management routine. However, complete reliance on this procedure can lead to unintended oversight of cybersecurity issues. The change management process is generally focused on detecting errors and the auditing and logging of changes in the operational environment after the upgrade has been performed.
From the cyber perspective, this is not enough. As demonstrated in previous steps, significant effort is required to ensure a secure environment, not just an operational one. The question to be answered is “when” should the upgrade be performed during an application or system change. Should it be performed multiple times during the update?
Think through this issue thoroughly and make notes on your thought process. It is important that the risk analysis associated with an application or system change is conducted at the optimal time.
Note that there is no submitted assignment for this step. However, the research and corresponding notes related to this step will be applicable to the final report for Maria and the other executives. When this is complete, move to the next step, where supply chain risks will be considered.
Step 8: Review Supply Chain Risks
Following the previous steps relative to the supply chain and previous projects, it is time to thoroughly review risk within the supply chain.
Like many companies, your organization is dependent on a supply chain, so the software development process must include a supply chain risk management (SCRM) plan to minimize the impact of supply chain-related risks on business operations and the security of the infrastructures and data.
Note that there is no submitted assignment for this step. The identified supply chain risks will be reported in the next step.
Step 9: Document Supply Chain Risks
After review, it’s time to document supply chain risks. This portion of the overall report requires a two- to three-page narrative that addresses the following supply chain concerns:
1. Describe cybersecurity implications related to the procurement process.
2. Provide recommendations that would address these concerns.
3. Include appropriate supply chain risk management practices.
Where appropriate, cite references to support the assertions in the recommendations and conclusion.
Submit your report on supply chain concerns here for feedback.
Submission for Project 4: Supply Chain Cyber Security Risk Report
Previous submissions
0
Drop files here, or click below.
Add Files
Then, move to the next step, in which you will consider how the procedures of acquisition, procurement, and outsourcing line up in the organization.
Step 10: Consider Alignment Issues
Based on the review and recommendations on the supply chain described in the previous step, consider how well the policies and procedures regarding the acquisition, procurement, and outsourcing of software in your organization are aligned.
Outline a strategic approach to getting all the functions in alignment. There is no submission for this step. The alignment recommendations will be submitted in the next step.
Step 11: Develop an Acquisition Alignment Report
Keeping the alignment issues in mind from the previous step, prepare a one-page plan to align acquisition, procurement, and outsourcing of software applications for the enterprise. This should be a strategic approach to getting all the functions in alignment. Start with a request for information, proceed through acquisition, testing, and implementation, and finish with ongoing maintenance of the application.
All the work has been done in the previous steps. This step is designed to “bring it all together” in one easy-to-understand approach. The approach will be used in the final step to complete the supply chain analysis with a mitigation plan as it applies to software acquisition and maintenance.
Submit your one-page plan to align acquisition, procurement, and outsourcing efforts with your organization’s information security goals here for feedback.
Submission for Project 4: Acquisition Alignment Report
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consolidate all your work thus far.
Step 12: Consolidate Your Work
The acquisition plan alignment is complete. For this exercise, collate all the material presented in the previous steps into a cohesive presentation that describes the entire software risk analysis processes and articulates specific supply chain cybersecurity threats and the technologies and policies that can be used to mitigate them.
You will use your consolidated results in your final project submission in the next step.
Project 4: System Development or Application Assurance
Step 13: Write the Risk Analysis/Supply Chain Threats/Mitigation Report
Management is always interested in solutions, and Maria Sosa and the other executives at your company are no exception. In the case of cybersecurity, there are no absolute solutions to an ever-changing environment. However, there are steps to mitigation that might eliminate or minimize the results of certain vulnerabilities. This final step is to describe the mitigation strategies recommended as a result of all previous steps in the project.
The final report for the executive meeting should be five to seven pages, only one to two of which will have to be written in this step. The remainder is from all the previous steps in the project.
Use the Supply Chain Risk Mitigation Final Report Template to submit your specific testing and validation procedures.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Submission for Project 4: Supply Chain Risk Mitigation Final Report
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals intervention strategies to address Marge’s addiction and you consider potential ethical dilemmas related to the intervention
How much physical change has occurred to our bodies in the last 10 to 20 years as it relates to skin, hair, and or weight? Where do some of the people on the “Ten Most Beautiful” Lists rank on the BMI scale?
Be sure to reference the textbook on your reference page.
Project 4: System Development or Application Assurance
Start Here
It is critical that cybersecurity professionals be able to use all applicable systems, tools, and concepts to minimize risks to an organization’s cyberspace and prevent cybersecurity incidents. In this project, you will demonstrate your understanding of how to apply security principles, methods, and tools within the software development life cycle. You will also apply your knowledge of the cybersecurity implications related to procurement and supply chain risk management.
This is the fourth and final project for this course. There are 13 steps in this project. Begin below to review your project scenario.
Transcript
Competencies
Your work will be evaluated using the competencies listed below.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Step 1: Assess Software Vulnerabilities
Project 2 outlined the steps involved to produce a final vulnerability and threat assessment, and Project 3 covered risk analysis and mitigation. Those assessments were across the entire enterprise and included numerous elements outside the realm of systems and technology. However, they did uncover opportunities for improvement in the application software processes.
For this step, return to the vulnerability and threat assessment from Project 2 and focus on all areas of application software that were itemized. Give additional thought to uncover software that perhaps did not make the list or were assumed to be secure and simply overlooked.
The assignment is to create a more comprehensive list of application software that could place the enterprise at risk of a breach, loss of data, loss of production, and/or loss of brand confidence.
The assessment should include the application of secure principles, development models such as the maturity model or integrated product and process development (IPPD), software development methods, libraries and toolsets used in the software development life cycle or systems development life cycle.
Use the Software Vulnerability Assessment Template to submit your results for feedback.
Submission for Project 4: Software Vulnerability Assessment
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will review your organization’s software procurement policy.
Step 2: Review Software Procurement Policy
Upon completion of the software specific vulnerability assessment, conduct a review of the organization’s software procurement policies for software development methods.
Note that there is no submitted assignment for this step. Your review will be used in the submission for the following steps.
When the review is complete, move to the next step, where you will create a table or spreadsheet that lists recommended policies for software procurement that address certain questions or concerns.
Step 3: Create a Software Procurement Policy List
You’ve reviewed the organization’s policies for software development methods. Now it’s time to create a policy list for software procurement. The following are some sample questions to be included in a software procurement policy:
• Does the vendor provide any cybersecurity certifications with the product?
• Does the vendor provide access to the source code for the product? Are there other security issues in source code to be addressed?
• What is the guaranteed frequency of security updates to be provided for the product?
• What is the implementation process for software updates/upgrades?
What are additional questions or concerns that should be included in the procurement process? Create a table or spreadsheet that lists recommended policies to properly address these questions or concerns.
Use the Procurement Policy Template to list the cybersecurity implications related to procurement and supply chain risk management and submit your results for feedback.
Submission for Project 4: Procurement Policy List
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will generate assurances or controls to address each of the policy issues identified here.
Now that the procurement policies have been identified in the previous step, what assurances or controls should be established as policy that would evaluate the security implications during the software acceptance process? The objective is to provide a one-page overview of security testing that would be included in the acceptance of a vendor’s application.
The next step in this project will document the actual testing and validation. This step is simply to verify the congruence between the procurement process and acceptance process. In other words, do the procurement policies establish the correct cyber security framework for software purchase and do the acceptance policies match?
In considering the security implications of the in the software acceptance phase of the development cycle, use the Software Acceptance Policy Template to document recommended tests and assurances for the procurement policies identified in the previous steps.
Submit your results below for feedback.
Submission for Project 4: Software Acceptance Policy
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will research software testing and validation.
Step 5: Research Software Testing and Validation Procedures
Based on the software acceptance policies created in the previous step, consider what testing and validation procedures could be used to assure compliance.
Note that there is no submitted assignment for this step. You will submit the final list of recommended testing and validation procedures in the next step.
Step 6: Document Software Testing and Validation Procedures
You’ve completed the research, and it is now time to create testing and validation procedures that follow a specific process to assure compliance. The key to the success of this step is to document exact procedures to be followed by a testing team prior to installation.
At a minimum, the procedures should address the following questions:
• What are potential vulnerabilities inherent in the application platform?
• How well does the vendor document preventive measures built into the application?
• Are there alternative solutions provided by the vendor or in the application in case of a breach?
• What additional safeguards can be added to ensure the security of the software environment?
The testing and validation procedures should address each of these concerns.
The executive team will want to see specific steps for the testing team to follow as the team members complete the tests and assurances you recommended in the previous step.
Document your specific testing and validation recommendations from a cybersecurity policy standpoint in the Test Script Procedures Template and submit for feedback.
Submission for Project 4: Test Script Procedures
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consider procedures for upgrading software.
Step 7: Review Software Upgrade Procedures
In the last step, you documented testing and validation requirements. In this step, it’s important to review software upgrades. Installation of a software upgrade has similar, yet unique requirements from the previous steps. In most enterprise environments, software updates and upgrades follow a specific change management routine. However, complete reliance on this procedure can lead to unintended oversight of cybersecurity issues. The change management process is generally focused on detecting errors and the auditing and logging of changes in the operational environment after the upgrade has been performed.
From the cyber perspective, this is not enough. As demonstrated in previous steps, significant effort is required to ensure a secure environment, not just an operational one. The question to be answered is “when” should the upgrade be performed during an application or system change. Should it be performed multiple times during the update?
Think through this issue thoroughly and make notes on your thought process. It is important that the risk analysis associated with an application or system change is conducted at the optimal time.
Note that there is no submitted assignment for this step. However, the research and corresponding notes related to this step will be applicable to the final report for Maria and the other executives. When this is complete, move to the next step, where supply chain risks will be considered.
Step 8: Review Supply Chain Risks
Following the previous steps relative to the supply chain and previous projects, it is time to thoroughly review risk within the supply chain.
Like many companies, your organization is dependent on a supply chain, so the software development process must include a supply chain risk management (SCRM) plan to minimize the impact of supply chain-related risks on business operations and the security of the infrastructures and data.
Note that there is no submitted assignment for this step. The identified supply chain risks will be reported in the next step.
Step 9: Document Supply Chain Risks
After review, it’s time to document supply chain risks. This portion of the overall report requires a two- to three-page narrative that addresses the following supply chain concerns:
1. Describe cybersecurity implications related to the procurement process.
2. Provide recommendations that would address these concerns.
3. Include appropriate supply chain risk management practices.
Where appropriate, cite references to support the assertions in the recommendations and conclusion.
Submit your report on supply chain concerns here for feedback.
Submission for Project 4: Supply Chain Cyber Security Risk Report
Previous submissions
0
Drop files here, or click below.
Add Files
Then, move to the next step, in which you will consider how the procedures of acquisition, procurement, and outsourcing line up in the organization.
Step 10: Consider Alignment Issues
Based on the review and recommendations on the supply chain described in the previous step, consider how well the policies and procedures regarding the acquisition, procurement, and outsourcing of software in your organization are aligned.
Outline a strategic approach to getting all the functions in alignment. There is no submission for this step. The alignment recommendations will be submitted in the next step.
Step 11: Develop an Acquisition Alignment Report
Keeping the alignment issues in mind from the previous step, prepare a one-page plan to align acquisition, procurement, and outsourcing of software applications for the enterprise. This should be a strategic approach to getting all the functions in alignment. Start with a request for information, proceed through acquisition, testing, and implementation, and finish with ongoing maintenance of the application.
All the work has been done in the previous steps. This step is designed to “bring it all together” in one easy-to-understand approach. The approach will be used in the final step to complete the supply chain analysis with a mitigation plan as it applies to software acquisition and maintenance.
Submit your one-page plan to align acquisition, procurement, and outsourcing efforts with your organization’s information security goals here for feedback.
Submission for Project 4: Acquisition Alignment Report
Previous submissions
0
Drop files here, or click below.
Add Files
In the next step, you will consolidate all your work thus far.
Step 12: Consolidate Your Work
The acquisition plan alignment is complete. For this exercise, collate all the material presented in the previous steps into a cohesive presentation that describes the entire software risk analysis processes and articulates specific supply chain cybersecurity threats and the technologies and policies that can be used to mitigate them.
You will use your consolidated results in your final project submission in the next step.
Project 4: System Development or Application Assurance
Step 13: Write the Risk Analysis/Supply Chain Threats/Mitigation Report
Management is always interested in solutions, and Maria Sosa and the other executives at your company are no exception. In the case of cybersecurity, there are no absolute solutions to an ever-changing environment. However, there are steps to mitigation that might eliminate or minimize the results of certain vulnerabilities. This final step is to describe the mitigation strategies recommended as a result of all previous steps in the project.
The final report for the executive meeting should be five to seven pages, only one to two of which will have to be written in this step. The remainder is from all the previous steps in the project.
Use the Supply Chain Risk Mitigation Final Report Template to submit your specific testing and validation procedures.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.
• 1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
• 1.5: Use sentence structure appropriate to the task, message and audience.
• 2.4: Consider and analyze information in context to the issue or problem.
• 9.4: Software Security Assurance: Demonstrate secure principles, methods, and tools used in the software development life cycle.
• 9.5: Software Security Assurance: Describe the cybersecurity implications related to procurement and supply chain risk management.
Submission for Project 4: Supply Chain Risk Mitigation Final Report
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals How much physical change has occurred to our bodies in the last 10 to 20 years as it relates to skin, hair, and or weight?
You are the lead S Corporations tax specialist in your area and you have asked to give a talk to business owners interested in this form of organization. Explain the rules of forming an S Corporation, the basic rules, and how distributions work. Please be sure to cover operating issues, such as the identification of the corporation’s accounting period
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals Explain the rules of forming an S Corporation, the basic rules, and how distributions work.
Conclude with a research or policy question for further research. Part 2 of 2 1) How does social media assist emergency management. Give examples. 2) How does social media hinder emergency management. Give examples. 3) How can emergency management officials help assist with providing relevant and detailed information about public health concerns? Conclude with a research or policy question.
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals How does social media assist emergency management
What are different kinds of insider threats to our US cyber security? What mitigation efforts can help address this concern? Does corruption and cyber infrastructure have anything in common? What are they and what can be done to help address this concern?
Timely Delivery– primewritersbay.com believes in beating the deadlines that our customers have imposed because we understand how important it is.
Customer satisfaction- Customer satisfaction. We have an outstanding customer care team that is always ready and willing to listen to you, collect your instructions and make sure that your custom writing needs are satisfied
Writing services provided by experts- Looking for expert essay writers, thesis and dissertation writers, personal statement writers, or writers to provide any other kind of custom writing service?
Enjoy Please Note-You have come to the most reliable academic writing site that will sort all assignments that that you could be having. We write essays, research papers, term papers, research proposals What are different kinds of insider threats to our US cyber security?