Write My Assignment FREE

Higher Nationals

Assignment Brief – BTEC (RQF)

Higher National Diploma in Computing

Submission Format:

You are required to perform three tasks in this assignment under Part A, Part B and Part C. The submission of PartAis as a research document which will consist of your findings from a literature review. In this part, you are required to do a desk research on possible attacks to compromise availability of the organization. Draw one or more attack trees, which reflect your analysis of how you could successfully compromise the availability of the systems, resources and information. The attack trees can be annotated or you may have some discussion accompanying them (as you think necessary). The submission must be in MSWord format. The diagrams may be produced using any software product or hand drawn but must be converted to a MSWord file. All diagrams and text must be incorporated into one document. To demonstrate your research ability, you must adequately reference each of the attack methods you have identified. This may either be undertaken through your annotation of each of the attacks or by utilising in-text references within each of the entities of the attack tree.

QACF004

The submission of Part B is an oral presentation followed by a Q & A session. In order to complete You task is to effectively communicate techniques and methods that the employees can and should use to ensure that the availability of systems and resources is met. You may assume that employees have a range of technical skills and hence your educational resource should be suitable to an audience with varying degrees of IT competencies. The findings of this section should be presented in a 10 minutes oral presentation followed by a 5 minutes Q & A session. You are required to make effective use of PowerPoint slides with headings, bullet points and subsections as appropriate. Your research findings should be accurately and properly referenced using the Harvard referencing style. The Submission of PartCis MSWORD document which covers all the security management techniques mentioned in the assignment. All the policies, procedures etc. should be clearly explained in point form. You should include references using the Harvard referencing style.

Unit Learning Outcomes:

LO1 Assess risks to IT security. LO2 Describe IT security solutions. LO3 Review mechanisms to control organisational IT security. LO4 Manage organisational security.

Assignment Brief and Guidance:

You are an independent computer security analyst. The CEO of a small organization asked you to undertake a detailed analysis of its current computer and network state. The CEO has recently been informed through media and newspaper publications that there are numerous threats, which could compromise the availabilityof the computers, information and associated resources. There are 50 laptop computers and 1 HP server (for processing orders) within the firm. Each laptop makes use of Microsoft Windows 10 and Microsoft Office 2019. The operating system and Microsoft software have never been updated. The company shares an ADSL 2+ connection amongst all computers. Server backups are done fortnightly and stored on a DVD spindle named “backup1”. Workstation backups are done bi-monthly and stored on a DVD spindle named “backup2”. Employees have email addresses provided by the Internet Service Provider. Documents are shared amongst employees through a Network Attached Storage.

PART A: (for P1, P2, M1, D1)

Identify and explain broad range of attacks that demonstrate current, feasible methods to compromise availability.

Draw attack trees, which reflect your analysis of how you could successfully compromise the

availability of the systems, resources and information.

To demonstrate your research abilities, you must adequately reference each of the attack methods you have identified. This may be undertaken through your in-text references within each of the entities of the attack tree.

PART B: (For P3, P4, M2, M4, M5, D2, D3)

CEO was pleased with your research document which explains the possible attacks and you have been hired to educate employees on how to ensure the availability of systems, resources and information.

Prepare a Microsoft Power Point Presentation which covers:

1. Importance of Availability (Reputation, DPA, CMA, SLA etc)
2. Importance of network security and infrastructure (NAT, DMS, FWs)
3. Importance of security policies and why it should align with organizational policies?
4. Network monitoring System with advantages and Importance (Honeypots, firewalls etc.)
5. Importance of physical Security and different physical security methods
6. Access Control with Biometrics
7. How to avoid Hardware Theft
8. Risk Management process and Importance of Risk management with ISO 31000
9. Contingency planning and Disaster management
10. Staff responsibilities to ensure availability
11. HOW Security audits IMPACT ON overall security?
12. Conclusion
13. Reference

QACF004

Learning Outcomes and Assessment Criteria
Learning Outcome	Pass	Merit	Distinction
LO1 Assess risks to IT security	P1 Identify types of security risks to organisations. P2 Describe organisational security procedures	M1 Propose a method to assess and treat IT security risks.	LO1 & 2 D1 Investigate how a ‘trusted network’ may be part of an IT security solution.
LO2 Describe IT security solutions	P3 Identify the potential impact to IT security of incorrect configuration of firewall policies and third- party VPNs. P4 Show, using an example for each, how implementing a DMZ, static IP and NAT in a network can improve Network Security.	M2 Discuss three benefits to implement network monitoring systems with supporting reasons.
LO3 Review mechanisms to control organisational IT security	P5 Discuss risk assessment procedures. P6 Explain data protection processes and regulations as applicable to an organisation.	M3 Summarise the ISO 31000 risk management methodology and its application in IT security. M4 Discuss possible impacts to organisational security resulting from an IT security audit.	LO3 and LO4 D2 Consider how IT security can be aligned with organisational policy, detailing the security impact of any misalignment. D3 Evaluate the suitability of the tools used in an organisational policy.
LO4 Manage organisational security	P7 Design and implement a security policy for an organisation. P8 List the main components of an organisational disaster recovery plan, justifying the reasons for inclusion.	M5 Discuss the roles of stakeholders in the organisation to implement security audit recommendations.

The post Assignment Brief – BTEC (RQF) appeared first on My Assignment Online.

Expert Help With This Assignment — On Your Terms