a) Identify the company's potential information security risks and vulnerabilities to assist you in prioritising the implementation of the CNSS controls based on the most critical risks.   b) Identify the CNSS controls required to address the risks and vulnerabilities. Provide a suitable implementation strategy for this purpose.   c) In the given scenario, which of the three CIA triads of information security are most at risk? Justify your answer.

Management Of Information Security
6th Edition
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:WHITMAN, Michael.
Chapter11: Security Maintenance
Section: Chapter Questions
Problem 3RQ
icon
Related questions
Question

The Committee on National Security Systems (CNSS) is an US intergovernmental organisation tasked that set policy, standards, and guidelines for national system security. According to the CNSS, information security refers to the protection of data and its critical components, such as the hardware and systems used to store, use, and transmit data. The model has been designed based on the CIA triad which addresses a variety of information security management, computer and data security, and network security issues. As a result of the growing threat of cyberattacks, it can also be used in the industry for risk assessment and vulnerabilities of utilities and other critical infrastructure.

 

TSY Business Ltd is a financial services firm that has recently dealt with several security incidents, including data breaches and unauthorised access to its information systems. Hackers infiltrated the company's network and stole sensitive financial data from multiple clients, threatening to make the information public if a ransom is not paid. As the Chief Information Security Officer (CISO), you are tasked to lead a security expert team to create a plan that addresses information security risks and improves the company's security posture by implementing CNSS controls. Your strategy should include the following three steps:its

a) Identify the company's potential information security risks and vulnerabilities to assist you in prioritising the implementation of the CNSS controls based on the most critical risks.

 

b) Identify the CNSS controls required to address the risks and vulnerabilities. Provide a suitable implementation strategy for this purpose.

 

c) In the given scenario, which of the three CIA triads of information security are most at risk? Justify your answer.

Expert Solution
steps

Step by step

Solved in 3 steps

Blurred answer
Knowledge Booster
Maintenance
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
  • SEE MORE QUESTIONS
Recommended textbooks for you
Management Of Information Security
Management Of Information Security
Computer Science
ISBN:
9781337405713
Author:
WHITMAN, Michael.
Publisher:
Cengage Learning,