CMGT 431 Wk 4 Discussion – Assessing and Managing System Security

Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 10 points or 50% of the grade, whichever is less.

DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)

Respond to the following in a minimum of 175 words (Points may be deducted for short responses):

In order to secure information systems from attacks and other vulnerabilities, an IS professional must first perform security assessments to determine what threats and vulnerabilities can potentially weaken or bring down a network.

• Choose a company and describe its services and the infrastructure it uses to provide these services.
• Describe types of vulnerabilities the company can be susceptible to based on its users and infrastructure, and who would be affected.
• Explain the types of security assessments you would employ and the steps you would recommend to manage the risks you identified.

Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)

Reply to at least 2 posting. Be constructive and professional in your responses. Postings must be substantive.