Case Study: The Critical Need for Information Security
Download and read the following articles available in the ACM Digital Library:
Bernier, M., Chapman, I., Leblanc, S. P., & Partington, A. (2011). An overview of cyber-attack and computer network operations simulation. Proceedings from MMS '11: Military Modeling & Simulation Symposium. Boston, MA.
Maughan, D. (2010, February). The need for a national cybersecurity research and development agenda. Communications of the ACM, 53(2), 29-31.
Write a four to five (4-5) page paper in which you:
1. Identify at least three (3) benefits or key knowledge points that could be derived from using cyber-attack simulator systems and research, and suggest how this insight could assist in defining the needs for security within an organization.
2. Analyze and determine which sector, public or private, has greater insight on the potential of cyber attacks. Justify your answer by citing at least three (3) examples.
3. Suggest at least four (4) best practices that should be implemented when developing a cyber security strategy within a security enterprise. Then, evaluate the required roles and functions of Information Technology (IT) personnel that would be required to sustain these best practices.
4. Describe the role of planning when developing a cyber security strategy and what key deliverables would ensure an effective implementation and transition.
5. Suggest how public-private partnerships can strengthen cyber security efforts and effectiveness in a:
a. Corporate environment
b. Regional level
c. National level
6. Use at least three (3) quality resources in this assignment.
The specific course learning outcomes associated with this assignment are:
- Evaluate the ethical concerns inherent in cyber security and how these concerns affect organizational policies.
- Describe the corollary roles of security in an enterprise.
- Describe best practices in cyber security.
- Use technology and information resources to research issues in cyber security.
- Write clearly and concisely about topics associated with cyber security using proper writing mechanics and technical style conventions.