Background:

No-Internal-Controls, LLC is a mid-sized pharmaceutical company in the Midwest of the US employing around 150 employees. It has grown over the past decade by merging with other pharmaceutical companies and purchasing smaller firms.

Recently No-Internal-Controls, LLC suffered a ransomware attack. The company was able to recover from the attack with the assistance of a third party IT Services Company.

Attack Analysis:->After collecting evidence and analyzing the attack, the third party was able to recreate the attack–>No-Internal-Controls, LLC has a number of PCs configured for employee training–>These training computers use generic logins such as “training1”, “training2”, etc. with passwords of “training1”, “training2”, etc.–>One of the firms purchased by No-Internal-Controls, LLC allowed Remote Desktop connections from the Internet through the firewall to the internal network for remote employees–>Due to high employee turnover and lack of documentation none all of the IT staff were aware of the legacy remote access–>The main office has only a single firewall and no DMZ or bastion host exists to mediate incoming remote desktop connections–>The internal network utilized a flat architecture–>An attacker discovered the access by use of a port scan and used a dictionary attack to gain access to one of the training computers–>The attacker ran a script on the compromised machine to elevate his access privileges and gain administrator access–>The attacker installed tools on the compromised host to scan the network and identify network shares–>The attacker copied ransomware into the network shares for the accounting department allowing it spread through the network and encrypt accounting files–>Critical accounting files were backed up and were recovered, but some incidental department and personal files were lost.

Instructions:

You have been hired by No-Internal-Controls, LLC in the newly created role of CISO and have been asked to place priority on mitigating further attacks of this type.

• Suggest at least two policies that would help mitigate against attacks similar to this attack
• Suggest at least two controls to support each policy (so a minimum of 4 controls)
• Identify each of the controls as either physical, administrative, or technical and either preventative, detective, or corrective (so one control might be a physical, preventive control)
• Keep in mind that No-Internal-Controls, LLC is a mid-sized company with a small IT staff and limited budget
• Do not attempt to write full policies, simply summarize each policy you suggest in one or two sentences
• Clearly indicate how each policy you suggest will help mitigate similar attacks and how each control will support the associated policy.

 

Do you need a similar assignment done for you from scratch? We have qualified writers to help you. We assure you an A+ quality paper that is free from plagiarism. Order now for an Amazing Discount!
Use Discount Code “Newclient” for a 15% Discount!

NB: We do not resell papers. Upon ordering, we do an original paper exclusively for you.

The post you have been hired by no internal controls llc in the newly created role of ciso and have been asked to place priority on mitigating further attacks of this type suggest at least two policies that would help mitigate against attacks similar to this appeared first on Essay Writers.

Final Project Guidelines
Please use this format to submit your final work. The paper must follow all the guidelines as instructed in order to obtain full credit.
Remember that our team of tutors is available for any questions regarding your final work.You must present the final version of yourwork as no previous corrections will be carried out. To submit the final project, students must use the template below, with theiranswers written after each statement.
Please present your final paper according to these requirements:
• Arial 12Font.
• Margin: 2,5.
• Line spacing: 1,5.
• All fields on the cover page must be completed.
• The document needs to be properly paged.
Your final project must be authentic and individual. Any work that has been plagiarized or papers written by others or with the help of othersare likely to be failed. If this occurs for the second time, you will not be permitted to obtain your degree.
Be aware that you are permitted a maximum of two submissions per subject. If both projects do not meet the standards and fail, the student must pay the corresponding fee to be evaluated again.
When writing your final projectplease use Microsoft Office, Adobe or Apache’s Open Office Writertools (DOC, DOCX, ODT, PDF, etc.). Please consult your tutor when using a different format. Additional information about the software will be needed.
Please use the following format:
ddmmyyyy_Subject_LastNameandName.pdf
Example:
11052019_StrategicManagement_ElsaMoore.pdf
The project should not exceed more than 18 pages, excluding the cover page, bibliography and theappendix.
Evaluation Guidelines
The final work will be evaluated based on the following criteria:
• Acquired knowledge (25%): the knowledge acquired throughout the course of the subject will be evaluated through the analysis of the theoretical data shown in the project presented by the student.
• Development of the Subject (25 %):the interpretation of thethesis subject by the student and its development will be evaluated in a coherent and analytical manner.
• Final result (25%):the final evaluation is based on coherent solutions applied to solve objectives set out in the paper. The presentation must be conclusive and formatting must meet established parameters.
• Additional information and bibliography (25%):additional information regarding the research and subject matter will be evaluated and taken into consideration as a bonus. This consistof: bibliography, visual graphics, charts, independent studies carried out by the student, external academic sources, articles of opinion, etc. All sources, both printed and online, must be referenced according to the APA regulations.
BACKGROUND
TopTravel SL is a company dedicated to high quality online hotel reservations. It operates internationally and its customers are large hotel groups that offer luxury services.
With more than 10 years of experience, TopTravel SL has been among the top 5 websites used to choose accommodation. A large percentage are business trips, however, there is also a significant number of leisure trips, which seek an accommodation with the most favorable conditions.
In the last 5 years, prestigious competitor companies have launched very strong marketing campaigns that have forced TopTravel SL to make an important investment in the Online Marketing Department. This department is physically located in Amsterdam, the city where TopTravel SL was founded, although there is staff distributed in the US, Singapore and Spain.
This department has undergone major changes in the last year, as they had to hire a new Social Media Manager, since the previous one left the company for personal reasons. Until then, the company had a very efficient team of analysts, designers, web/SEO programmers, content manager, social media strategist and community manager. However, with the arrival of the new manager the team was affected; There were some team members who also decided to leave, and those who stayed did not have a good working environment. Due to the flight of employees, new hires were made; young talents keen to learn. However, most of the veteran staff is demotivated given the situation, and a few months later the results of the last campaign they hadlaunched were significantly affected by this.
The new Social Media Manager, Marc Blumer, is considered to be the best in the world in his field and has won several awards as best international publicist. However, despite being very good in his field, he has great communicative difficulties that directly affect his leadership ability, which makes it very difficult to manage a new team that has recently lost its leader. He has a leadership style with a high authoritarian component, tending to adopt a loud and somewhat aggressive speaking tone at meetings, he has troublelistening to opinions from group members other than his own, and he does not handle constructive criticism well. Something similar happens when he has to communicate the results with General Management, his communication issues mean that the information does not always arrive in the best way, and this leads to misunderstandings. This situation has made Marc feel blocked.
In a meeting between Marketing Management, Sales Management and Human Resources Management, it was decided to hire the services of a specialized Coaching Consulting firm. This consultancy assigns you the project to intervene in the Online Marketing Department of TopTravel SL. Marc Blumer’scommunication skills must be improved, and at the same time, his skills and abilities must be strengthened so that he has a wide range of resources, in this way he will be able to effectively lead the team, and will redirect the work towards the companyâ€s goals. On the other hand, it is necessary that employees go back to working as a team, because until now they worked more like a group.
As a coach of this consulting firm you are given two options to choose from; apply an individual coaching process to Marc Blumer, or apply a team coaching process to the Department.
DEVELOP
Before starting, you must choose the option you want to solve; individual coaching or team coaching. You must solve only one option, as we will only evaluate one of the two options.
Individual Coaching
1. Analyse the starting situation of the Online Marketing Department:
a. To provide context, explain what the startingsituation is, from an analytical perspective.
b. Explain the importance of carrying out a coaching process; what could happen if you do not act quickly, and what benefits would be obtained after the intervention.
2. Establish some goals: Formulate at least 3 goalsto achieve with the executive coaching process.
3. Plan a complete individual coaching process for Marc Blumer: In this section you should design the entire coaching process, and frame the sessions within the Coaching phases. This planning must be very detailed and precise, explaining step by step the entire process. Youmustbear in mind:
a. Structure of the Coaching phases: plan how many sessions to perform in each of the phases, and what actions or techniques to apply in each one.
b. Include “powerful questions”, use the Grow Method to lead the questions.
Team/Deparment Coaching
1. Analyse the starting situation of the Online Marketing Department:
a. To provide context, explain what the starting situation is, from an analytical perspective.
b. Explain the importance of carrying out a coaching process; what could happen if you do not act quickly, and what benefits would be obtained after the intervention.
2. Establish some goals: Formulate at least 3 goalsto achieve with the executive coaching.
3. Plan a complete team coaching process: In this section you must design the entire coaching process for the Online Marketing Department.
Bare in mind:
a. The structure of the phases: plan how many sessions to perform in each of the phases, and what actions or techniques to apply in each one.
b. Include five “powerful questions” per session.
 
Do you need a similar assignment done for you from scratch? We have qualified writers to help you. We assure you an A+ quality paper that is free from plagiarism. Order now for an Amazing Discount!Use Discount Code “Newclient” for a 15% Discount!NB: We do not resell papers. Upon ordering, we do an original paper exclusively for you.