- Description
CYB 405 Wk 1 Discussion – IT Governance
Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 5 points or 50% of the grade, whichever is less.
DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)
Respond to the following in a minimum of 175 words (Points may be deducted for short responses):
- Explain how corporate and IT initiatives may have similar goals and objectives. In your opinion, can IT governance be effective if IT goals and objectives differ from those of the corporation? Why or why not? Provide an example to support your view.
Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)
Due Day 7
Post 2 replies to classmates or your faculty member. Be constructive and professional.
CYB 405 Wk 2 Discussion – Security Program Components
Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 5 points or 50% of the grade, whichever is less.
DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)
Respond to the following in a minimum of 175 words (Points may be deducted for short responses): Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to classmates or your faculty member.
Due Thursday
Respond to the following in a minimum of 175 words:
- As a CISO, you are responsible for developing an information security program based on using a supporting framework. Discuss what you see as some major components of an information security program.
Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)
Due Day 7
Post 2 replies to classmates or your faculty member. Be constructive and professional.
CYB 405 Wk 3 Discussion – NIST Publications
Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 5 points or 50% of the grade, whichever is less.
DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)
Respond to the following in a minimum of 175 words (Points may be deducted for short responses):
- Research the NIST Special Publications website and provide and describe a list of 800-series publications that address the following regulatory and compliance requirements:
- PCI DSS Compliance
- HIPAA Compliance
- Cloud Security Compliance
Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)
Due Day 7
Post 2 replies to classmates or your faculty member. Be constructive and professional.
CYB 405 Wk 4 Discussion – Security Policy
Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 5 points or 50% of the grade, whichever is less.
DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)
Respond to the following in a minimum of 175 words (Points may be deducted for short responses):
- Choose one of the control families described in FIPS 200, and describe how a security policy would be written to address that control family.
- Discuss the primary components of the security policy with respect to the security requirements described within the control family.
Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)
Due Day 7
Post 2 replies to classmates or your faculty member. Be constructive and professional.
CYB 405 Wk 5 Discussion – POA&M
Post a total of 3 substantive responses over 2 separate days for full participation. This includes your initial post and 2 replies to other students. If postings only occur on 1 day instead of the required 2, the overall grade of the postings will be reduced by 5 points or 50% of the grade, whichever is less.
DQ Response Due Thursday(20 points) (2 Point late penalty applies for late submission.)
Respond to the following in a minimum of 175 words (Points may be deducted for short responses):
- A plan of action and milestones (POA&M) is a living, historical document that identifies tasks that need to be created to remediate security vulnerabilities. The goal of a POA&M should be to reduce the risk of the vulnerability identified.
- Describe some of the common challenges with developing and maintaining a POA&M from the standpoint of a CISO versus a CIO.
Replies Due Monday (10 points each) (Not accepted late – postings after the week ends do not count toward the score.)
Due Day 7
Post 2 replies to classmates or your faculty member. Be constructive and professional.