Fluent Essays

At the start of this course, you were divided into teams, and each team was assigned to a nation in the Five Eyes intelligence alliance. As a nation team, you collaborated to represent and defend the cybersecurity policy and posture of the nation assigned to you. Your team was also assigned to a critical infrastructure sector, which you will also represent in Project 4. Research for Project 4 is designed to span the entire term, and your team is expected to complete it in parallel with Projects 1 through 3. You will work with your team to prepare for and then complete the Executive Leadership In Tabletop Exercises (ELITE) activity, and then write a report that identifies risks to cyber networks within the critical infrastructure industry segment assigned to your team and proposes recommendations to mitigate risks and make the networks more secure. This project will span across the entire course, but should take about 24 days to complete. After reading the scenario below, proceed to Step 1 where you will establish your team agreement plan. This is what I will need help on: 1. Much like a real battle against cyber criminals, the pace of ELITE is rapid, automated, and completely unforgiving of missed deadlines. As a team, you will review the security defense strategies you have determined for your sector. Conduct independent research on your assigned sector and share your findings with your team. After studying the supporting information of your sector, your team will determine and report the noted risks to your sector and your organization in the form of a two-page Risk Profile. As a team, think about security controls for your sector and use the team's group Discussion area to confer with your team regarding control selection. Your team should support your strategy by providing risk management techniques through the selection of security controls. These security controls will inform your risk profile and might also be used in ELITE. From previous projects that dealt in the international domain, include nation state actors that have been deemed threats to your team sector. You can use different sources of threat intelligence to gain deeper understanding of your sector and its methods for critical infrastructure protection. Many sectors are remotely monitored using industrial control systems (SCADA) and if this is found to be true in your team sector, this description should be included in the risk profile. Also, include an analysis of possible sources and situations of insider threats and if at any time your sector was exploited by an insider threat. Include how this was detected and what means were used to recover from that type of exploitation. These measures and countermeasures could be part of a security plan and may be incorporated in your selection of security controls in ELITE. When you have completed the Risk Profile, a designated team member should submit it for feedback. Much like a real battle against cyber criminals, the pace of ELITE is rapid, automated, and completely unforgiving of missed deadlines. As a team, you will review the security defense strategies you have determined for your sector. Conduct independent research on your assigned sector and share your findings with your team. After studying the supporting information of your sector, your team will determine and report the noted risks to your sector and your organization in the form of a two-page Risk Profile. As a team, think about security controls for your sector and use the team's group Discussion area to confer with your team regarding control selection. Your team should support your strategy by providing risk management techniques through the selection of security controls. These security controls will inform your risk profile and might also be used in ELITE. From previous projects that dealt in the international domain, include nation state actors that have been deemed threats to your team sector. You can use different sources of threat intelligence to gain deeper understanding of your sector and its methods for critical infrastructure protection. Many sectors are remotely monitored using industrial control systems (SCADA) and if this is found to be true in your team sector, this description should be included in the risk profile. Also, include an analysis of possible sources and situations of insider threats and if at any time your sector was exploited by an insider threat. Include how this was detected and what means were used to recover from that type of exploitation. These measures and countermeasures could be part of a security plan and may be incorporated in your selection of security controls in ELITE. When you have completed the Risk Profile, a designated team member should submit it for feedback. (2) You are familiar with the cybersecurity standards organizations and understand policy objectives of your sector and the resulting cyber defense strategy that provides the security of communications while meeting sector goals and objectives. As leadership representatives for your sector, work as a team to create a Risk Threat Matrix that incorporates what was learned from the security risk profile with the cyber defense strategy of the sector, and uses that to select security controls to be implemented for the sector. When you have completed the Risk Threat Matrix, a designated team member should submit it for feedback. It supposed to be two questions Sheet1 There are 30 decision categories. Each team member will select a role and 7-8 decision categories. These will be the areas of responsibility for the ELITE simulation rounds. Decision Categories: Role: Member: Round 1 Selections Round 2 Selections Round 3 Selections Authentication Systems Engineer-Architect Matt Backup Systems Engineer-Architect Matt Data Encryption Systems Engineer-Architect Matt Load Management Systems Engineer-Architect Matt Patch Management Systems Engineer-Architect Matt Role Based Access Controls Systems Engineer-Architect Matt Virtualization OR Cloud Computing Systems Engineer-Architect Matt Firewall Network-Analyst Sandra DNS Redundancy Network-Analyst Sandra Database Security Network-Analyst Sandra IDPS Network-Analyst Sandra Hiring and Employee Policy Brad Advisory Subscription and Federal Help Brad Training Brad Training Incentives Brad Training and Auditing Brad Business Continutiy Planning Brad Information Sharing Cyber Security Analysis Earl Public Relations Cyber Security Analysis Earl Emergency Bypass Policy Cyber Security Analysis Earl Information Sharing Policy Cyber Security Analysis Earl Breach Notification Policy Cyber Security Analysis Earl Information Privacy Policy Cyber Security Analysis Earl General Access Policies Cyber Security Analysis Earl Physical Security Brad Remote Access Policy Network-Analyst Sandra Authorized Software Policy Network-Analyst Sandra Systems Development Testing Systems Engineer-Architect Matt Antivirus Policy Network-Analyst Sandra Insurance Policy Brad Sheet1 RISK - THREAT MATRIX Threat Risk DDoS Attack Criminal Hacking Malware - Worm Intrusion Economic Downturn Ransomware Malicious Code Injection - Trojan Attack Phishing Attack Insider Threat Security Control Recommendations Compromise Confidentiality of Sensitive Information - Data Exfiltration Likelihood: Low Impact: High Risk Level: 2 Likelihood: High Impact: High Risk Level: 8 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: Low Impact: High Risk Level: 2 Likelihood: High Impact: High Risk Level: 8 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: Moderate Impact: High Risk Level: 7 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - AC Security Controls, data loss prevention mechanisms ISO/IEC 27001/27002 - Data Protection Standards NIST SP 800-171/FISMA/FIPS - Encryption Standards: end-to-end encryption Unauthorized Access Likelihood: High Impact: High Risk Level: 8 Likelihood: High Impact: High Risk Level: 8 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: Low Impact: High Risk Level: 2 Likelihood: High Impact: High Risk Level: 8 Likelihood: High Impact: High Risk Level: 8 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: Moderate Impact: High Risk Level: 7 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - AC Security Controls: role-based controls, network segmentation, principle of least privileged, firewalls ISO/IEC 27001/27002 - Information Systems Security Standards: IDS/ SIEM Compromise Integrity of Identification and Authentication Mechanisms Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: Low Impact: Moderate Risk Level: 1 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Moderate Impact: Low Risk Level: 5 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - IA, AU, and CM Security Controls: multifactor authentication, event logging and auditing ISO/IEC 27001/27002 - Information Systems Security Standards Compromise Availability of Defense Sector Services, Networks, and/or Resources Likelihood: High Impact: Very High Risk Level: 9 Likelihood: Moderate Impact: Very High Risk Level: 8 Likelihood: Moderate Impact: Very High Risk Level: 8 Likelihood: Very Low Impact: Very High Risk Level: 2 Likelihood: High Impact: Very High Risk Level: 9 Likelihood: Moderate Impact: Very High Risk Level: 8 Likelihood: Low Impact: Very High Risk Level: 3 Likelihood: Low Impact: Very High Risk Level: 3 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - IR and CP Security Controls: incident response with digital forensics team, disaster recovery and contingency strategies ISO/IEC 27001/27002 - Information Systems Security Standards Breach or Compromise Integrity of Defense Sector Likelihood: Moderate Impact: Very High Risk Level: 8 Likelihood: Low Impact: Very High Risk Level: 7 Likelihood: Low Impact: Very High Risk Level: 7 Likelihood: Very Low Impact: Very High Risk Level: 2 Likelihood: Moderate Impact: Very High Risk Level: 8 Likelihood: Low Impact: Very High Risk Level: 7 Likelihood: Very Low Impact: Very High Risk Level: 2 Likelihood: Very Low Impact: Very High Risk Level: 2 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - AC, SC, SI, and CM Security Controls: Secure patch and configuration management, network security & monitoring technologies ISO/IEC 27001/27002 - Information Systems Security Standards: IDS / SIEM Supply Chain Compromise Likelihood: Low Impact: High Risk Level: 2 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: High Impact: High Risk Level: 8 Likelihood: Low Impact: Moderate Risk Level: 1 Likelihood: Moderate Impact: High Risk Level: 7 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: Very Low Impact: Moderate Risk Level: 1 NIST SP 800-37 - Risk Management Framework NIST Cyber Supply Chain Risk Management best practices and controls ISO/IEC 27036 - ICT Supply Chain best practices and security controls ISO/IEC 27001/27002 - Information Systems Security Standards Compromise Software Vulnerabilities / Software Assurance Likelihood: High Impact: High Risk Level: 8 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Low Impact: Moderate Risk Level: 1 Likelihood: High Impact: High Risk Level: 8 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Low Impact: Moderate Risk Level: 2 Likelihood: Very Low Impact: Moderate Risk Level: 1 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - CM Controls, Vulnerability management, Secure SDLC ISO/IEC 27001/27002 - Information Systems Security Standards: anti-malware software, SIEM event logging and auditing, secure patch management Social Engineering Likelihood: Very Low Impact: High Risk Level: 1 Likelihood: High Impact: Moderate Risk Level: 7 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: Very Low Impact: Very Low Risk Level: 0 Likelihood: High Impact: High Risk Level: 8 Likelihood: Moderate Impact: Moderate Risk Level: 6 Likelihood: Very High Impact: Moderate Risk Level: 8 Likelihood: Very Low Impact: Very Low Risk Level: 0 NIST SP 800-37 - Risk Management Framework NIST SP 800-53 - AC, AT, IA Security Controls ISO/IEC 27001/27002 - Information Systems Security Standards: information security awareness, education and training Note: This table was developed by the Hytema New Zealand cyber team, and provides a risk-threat matrix with security control recommendations for the defense sector. The values for likelihood and impact include: very low, low, moderate, high, and very high. The values for risk level range from 0-10 with the following designations: 0-1 low insignificant risk (requires periodic review); 2-3 low risk (requires periodic review); 4-6 moderate risk (requires regular monitoring and risk reduction activites); 7-8 high risk (requires frequent monitoring and risk reduction activites); and 9-10 critical risk (requires frequent monitoring, risk reduction activites, and contingency strategies).