Assignment

To enhance the security of information systems, enterprises are developing and adopting information system management systems.

However, if an information management system is exploited, applications and the data they contain will be compromised. Therefore, it is important to perform comprehensive threat modeling throughout the enterprise.

Assignment 1 THREAT MODELING

In your own words explain (a) what is threat modeling, and (b) why it is important for an enterprise to address threat modeling extensively. Please state your answer in a 1-2 page paper in APA format. Include citations and sources in APA style.

Assignment 2 - Threat Modeling Project

STRIDE is a model-based threat modeling technique developed by Microsoft. The methodology guides the security analyst through several activities that must be conducted in order for the process to be effective.

For this assignment explain in detail how you would start a threat modeling project. Please provide explanations for each step stated. Please state your answer in a 1-2 page paper in APA format. Include citations and sources in APA style.

Assignment 3 - Security Testing Vs. Threat Modeling

Threat modeling and security testing are similar in regard to both serve the purpose of addressing risk, however, both have their own respective specific purpose.

For this assignment identify and explain the key differences between security testing and threat modeling. Please state your answer in a 1-2 page paper in APA format. Include citations and sources in APA style.

Assignment 4- Secret Questions

In this week's reading we looked at accounts, identity, authentication, and account recovery. There is an old adage that says, "You can never be too safe. When it comes to the digital world, it's very true. Cyber hackers and hijackers are lurking everywhere to steal digital information.

And while it's a piece of cake for them to get passwords and other sensitive information, for the rest of us, keeping track of login information is a hassle especially since everything needs its own password. It's too much and eventually passwords get forgotten.

The week's reading mentioned various methods of approach to account recovery. In your own words state what approach(s) you believe are the best approaches for account recovery, and how you would apply the approach in an enterprise setting.

Please state your answer in a 1-2 page paper in APA format. Include citations and sources in APA style.