Assignment
Case Project 13: Read the following Case Study and answer the questions at the end in paragraph form.
Bay Pointe Security Consulting (BPSC) provides security consulting services to a wide range of businesses, individuals, schools, and organizations. BPSC has hired you as a technology student to help them with a new project and provide real-world experience to students who are interested in the security field.
Miles Comfort Coaches (MCC) is a regional charter bus service. Recently an IT employee was caught using the MCC network servers to store pirated software, yet because there were no incident response procedures in place, he was able to erase the software and destroy the evidence. MCC has approached BPSC to hire them to provide external forensics response services. However, several employees who are aware of the forensic analysis performed on the employee's computer have now raised concern about MCC scanning their computers. MCC has asked BPSC to help educate all employees about computer forensics.
Comfort Coaches has asked that you draft a memo to all employees regarding the steps to take when they suspect that an incident has occurred that may require digital evidence to be secured. Write a one-page memo to Comfort Coaches' employees about these steps.
Case Project 14: Read the following Case Study and answer the questions at the end in paragraph form.
Bay Pointe Security Consulting (BPSC) provides security consulting services to a wide range of businesses, individuals, schools, and organizations. BPSC has hired you as a technology student to help them with a new project and provide real-world experience to students who are interested in the security field.
Juliet's Desserts is a regional retailer that was recently purchased by new owners, who want to create new security policies. Because they have no experience in this area, they have hired BPSC to help them.
Juliet's Desserts is ready to start developing security policies and wants to make the security-related human resource policy its first. Create a one-page draft of a policy for them.
Case Project 15: Read the following Case Study and answer the questions at the end in paragraph form.
Bay Pointe Security Consulting (BPSC) provides security consulting services to a wide range of businesses, individuals, schools, and organizations. BPSC has hired you as a technology student to help them with a new project and provide real-world experience to students who are interested in the security field.
Rozenboom Real Estate (RRE) buys and sells high-end residential and commercial real estate across a multistate region. One of the tools that RRE offers is a sophisticated online website that allows potential buyers to take virtual tours of properties. However, RRE's site was recently compromised by attackers who defaced the site with malicious messages, causing several customers to threaten to withdraw their listings. RRE's senior management has demanded a top-to-bottom review of their security by an independent third party. BPSC has been hired to perform the review, and they have contracted with you to work on this project.
One of the activities recommended by BPSC is to perform a penetration test. However, the IT staff is very resistant to the idea and has tried to convince RRE's senior management that it is too risky and that a vulnerability scan would serve the same purpose. RRE has asked you for your opinion of performing a penetration test or a vulnerability scan. Create a memo that outlines the differences and what your recommendation would be.