1. Locate the document called Communication.docx – in our weekly D2L module.
2. Save this document to your jump drive or desktop as “Word Quiz”.
3. With all the information that you have learned in class you are going to turn this document into a letter format to your instructor letting them know all about computers.
4. Add today’s date at the top left-hand side of this document.
5. Add a salutation (name of the person you are sending this letter to) three lines after the date.
6. Delete all the paragraph headings in this document easily identified by the all cap and bolded format.
7. I would like the LAST sentence in this document to be bold and italic.
8. The fourth paragraph is very important. Let’s have this paragraph stand out by indenting the entire paragraph to .3 on the left and .4 on the right margins.
9. Move the tenth paragraph (about the modem speed) to make it the last paragraph of this paper. [do not be concerned about the features that you had applied in step 5]
10. Change the font color of paragraph 5 to a medium shade of red.
11. Shade the eight paragraph a light shade of gray.
12. Add a new sentence at the end of the third paragraph. “Modems are useful.”.
13. The second from last paragraph starting with the sentence – “To support the use of….” I would like to change the style of the paragraph to enhance the importance and visual appeal of the document. Leave the first sentence as it is but make the next three sentences bulleted points directly below the first sentence.
14. Select the third paragraph – add a box/border around this paragraph.
15. Check your spelling on this document, correct any errors. Clean up and format your document so that it looks professional. Your document should be single spaced with a blank line between paragraphs. This document should not exceed 2 pages.
16. Add headers to this document include: your name [first and last], the file name, and the current date.
17. Add an appropriate piece of clip art/online picture to this document, at the sixth paragraph. Format this image as follows; the size should be small- no larger than the paragraph, about two inches and format/wrap text behind the text.
18. Add a table below paragraph 9. This table should be three columns across and three rows down. Format this table in the center, size about three inches in size. Insert a number [any number is just fine] in each of the cells.
19. The font size of this document should be 11 points and the style should be Century Gothic for the entire document.
20. Add a piece of WordArt at the bottom of the second page using the text “Modems” without the quote marks.
21. Locate ISDN within your document and insert the trademark symbol.
22. Add a proper cover page with the following features:
    1. Your name centered in the middle of the page. (Isaac Garmo)
    2. Place today’s date right below it in a font and size you feel appropriate. (09-22-2019)
    3. My name should appear on this title page. ( Professor Bradley)
23. Save your document.
24. Your file should be three pages long; title page and two-page document.

Learning Objectives and Outcomes

• Develop a plan to deploy public key infrastructure (PKI) and encryption solutions to protect data and information.

Assignment Requirements

In this assignment, you play the role of chief information technology (IT) security officer for the Quality Medical Company (QMC). QMC is a publicly traded company operating in the pharmaceutical industry.

QMC is expanding its arena of work through an increase in the number of clients and products. The senior management of the company is highly concerned about complying with the multitude of legislative and regulatory laws and issues in place. The company has an internal compliance and risk management team to take care of all the compliance-related issues. The company needs to make important decisions about the bulk of resources they will need to meet the voluminous compliance requirements arising from the multidimensional challenge of expansion.

QMC will be required to conform to the following compliance issues:

• Public-company regulations, such as the Sarbanes-Oxley (SOX) Act
• Regulations affecting financial companies, companies that make loans and charge interest, such as the U.S. Securities and Exchange Commission (SEC) rules and Gramm-Leach-Bliley Act (GLBA)
• Regulations affecting healthcare privacy information, such as Health Insurance Portability and Accountability Act (HIPAA)
• Intellectual Property Law that is important for information asset protection particularly for organizations in the pharmaceutical and technology industry
• Regulations affecting the privacy of information, including personal identification information, such as personally identifiable information (PII) regularly collected from employees, customers, and end users
• Corporate governance policies including disclosures to the board of directors and the auditors and the policies related to human resources, governance, harassment, code of conduct, and ethics

Compliance with regulatory requirements implies encrypting sensitive data at rest (DAR) and allowing access to role-holders in the enterprise who require the access. It also implies that sensitive data in motion (DIM) or data that is being communicated via e-mail, instant message (IM), or even Web e-mail must be suitably protected and sent only to the individuals who have a right to view it. The company is conscious about the loss they may face in terms of penalty and brand damage if they fail to abide by the compliance laws, especially in the online information transfer phase. Therefore, as a dedicated employee, your task is to develop a content monitoring strategy using PKI as a potential solution. You will need to determine a process or method to identify multiple data types, processes, and organizational policies. Incorporate them into a plan, and select a PKI solution that will effectively address the content management needs of your company.

You need to present your PKI solution in the form of a professional report to the senior management.

Required Resources

None

Submission Requirements

• Format: Microsoft Word
• Font: Arial, 12-Point, Double-Space
• Citation Style: APA
• Length: 1–2 pages

Self-Assessment Checklist

Use the following checklist to support your work on the assignment:

• I have identified specific data types related to the specific compliance regulatory requirements.
• I have indicated a solution for sharing data beyond the borders of the organization.
• I have appropriately selected and developed a PKI solution for content control.
• I have followed the submission requirements.

The following scenario is based on an actual attack deconstructed at a seminar. The names and locations have been removed to preserve the privacy of the organization in question.

Background:No-Internal-Controls, LLC is a mid-sized pharmaceutical company in the Midwest of the US employing around 150 employees. It has grown over the past decade by merging with other pharmaceutical companies and purchasing smaller firms.

Recently No-Internal-Controls, LLC suffered a ransomware attack. The company was able to recover from the attack with the assistance of a third party IT Services Company.

Attack Analysis:

After collecting evidence and analyzing the attack, the third party was able to recreate the attack.

No-Internal-Controls, LLC has a number of PCs configured for employee training

These training computers use generic logins such as “training1”, “training2”, etc. with passwords of “training1”, “training2”, etc.

The generic logins were not subject to lock out due to incorrect logins

One of the firms purchased by No-Internal-Controls, LLC allowed Remote Desktop connections from the Internet through the firewall to the internal network for remote employees

Due to high employee turnover and lack of documentation, none all of the IT staff were aware of the legacy remote access

The main office has only a single firewall and no DMZ or bastion host exists to mediate incoming remote desktop connections

The internal network utilized a flat architecture

An attacker discovered the access by use of a port scan and used a dictionary attack to gain access to one of the training computers

The attacker ran a script on the compromised machine to elevate his access privileges and gain administrator access

The attacker installed tools on the compromised host to scan the network and identify network shares

The attacker copied ransomware into the network shares for the accounting department allowing it spread through the network and encrypt accounting files

Critical accounting files were backed up and were recovered, but some incidental department and personal files were lost

Instructions:You have been hired by No-Internal-Controls, LLC in the newly created role of CISO and have been asked to place priority on mitigating further attacks of this type

You have been hired by No-Internal-Controls, LLC in the newly created role of CISO and have been asked to place priority on mitigating further attacks of this type.

• Suggest one or more policies that would help mitigate against attacks similar to this attack
• Suggest one or more controls to support each policy
• Identify each of the controls as physical, administrative, or technical and preventative, detective, or corrective.
• Keep in mind that No-Internal-Controls, LLC is a mid-sized company with a small IT staff and limited budget
• Do not attempt to write full policies, simply summarize each policy you suggest in one or two sentences.
• Clearly indicate how each policy you suggest will help mitigate similar attacks and how each control will support the associated policy
• Be sure to follow APA formatting and provide references to support your key points in the case. Use the book and library resources to find references. Remember references add credibility to writing as well as providing proper credit to your sources.

Note: 100 point question

1 hour ago

Week 2 Strategic Use of Information Resources

Topics:

– Using information resources to achieve strategic aims

– Understanding the importance of Information systems and culture

Readings:

Chapter 2

Textbook: Pearlson, Keri E., and Saunders, Carol S. Managing & Using Information Systems: A Strategic Approach, 5th Edition, Wiley, 2010 ISBN: 978-1-1182-8173-4 Note: This book is available as an eBook from the Wiley Publishers.

Learning Tasks

The only assignment you have this week is the case study 1 and is due on Sunday, September 8, 2019 at 11:59 PM Eastern.

The problem-oriented method

A successful case study analyses a real-life situation where existing problems need to be solved. There are six steps in the problem-oriented method.

The Case is the “real life” situation.

Writing the case study Generally, there are eight sections in a case study. Use this as a guideline to write your case study. Synopsis/Executive Summary •Outline the purpose of the case study. •Describe the field of research — this is usually an overview of the company. •Outline the issues and findings of the case study without the specific details. •Identify the theory that will be used to analyse the case study. •The reader should be able to get a clear picture of the essential contents of the study. •Note any assumptions made. You may not have all the information you would like, so some assumptions may be necessary e.g. “It has been assumed that.. “Assuming that it takes half an hour to read one document.. Findings •Identify the problems found in the case. •Each analysis of a problem should be supported by facts given in the case together with the relevant theory and course concepts. •It is important to search for any underlying problems; for example, cross-cultural conflict may be only a symptom of the underlying problem of inadequate policies and practices within the company. •This section is often divided into sub-sections, one for each problem. Discussion •Summarise the major problem/s. •Identify alternative solutions to this/these major problem/s (there is likely to be more than one solution per problem). •Briefly outline each alternative solution and then evaluate it in terms of its advantages and disadvantages. •There is no need to refer to theory or coursework here. Conclusion Sum up the main points from the findings and discussion. Recommendations •Choose which of the alternative solutions should be adopted. •Briefly justify your choice and explain how it will solve the major problem/s. •This should be written in a forceful style as this section is intended to be persuasive. •Integration of theory and coursework is appropriate here. Implementation •Explain what should be done, by whom and by when. •If appropriate, include a rough estimate of costs (both financial and time). References Make sure all references are cited correctly. Appendices (if any) Attach any original data that relates to the study, which would have interrupted the flow of the discussion in the main body.

• Preparing for Case Studies/PBL (Project Based Learning)
  
• Writing a Case Analysis

Reading

Case study 1

IT261-1: Configure a desktop operating system.

Purpose

To engage you in the process of acquiring knowledge regarding the procedure for downloading or upgrading a desktop operating system and to enable you to identify the challenges a user may encounter when installing virtualization software. Your process should be comprehensive, demonstrating technical writing skills and self-awareness about steps needed to have a successful download or upgrade of an operating system. The assignment has to be in Standard English and demonstrate superior organization.

Assignment Instructions

Use your favorite search engine (e.g., Google^®) and the course resources (e.g., lab videos, ebook) and conduct research before creating this document.

In this Assignment you will submit a document that demonstrates that you understand how to install Windows 10 in a virtualized environment and how to configure various options. Use the Snipping Tool™ program, or any other appropriate screen capture program, to capture all of the screenshots.

Take a look at the following steps needed to complete this Assignment. Please see the grading rubric below. When you have completed the Assignment, submit your document to the unit Dropbox.

1. Explain the purpose of the host operating system.
2. Describe the process of configuring your system for the Windows 10 installation.
3. Explain the amount of memory you need to have before installing Windows 10 as your current operating system.
4. Include two screen captures of the installation process plus one last screen capture of the Windows 10 Start/Welcome screen (a total of 3 screen captures).
5. Explain any parts of the installation that could be confusing or challenging for a novice user.
6. Explain the purposes and uses of virtualization software and virtualization.

Assignment Requirements

Here are the paper requirements:

1. Include a cover page.
2. Include a separate page with the title “References” as the last page in the Word document.
3. Include the screenshots in the body of the paper.
4. Use Font Times New Roman or Arial 12 pt. Double spacing is required.
5. Include any sources you used for your research.

The paper is due by the end of the unit.

In your paper you must demonstrate knowledge of this week’s topic(s). Your goal is to demonstrate to your professor that you understand this material.

The paper must be written in your own words. APA style formatting, a cover page, and a reference page are required. Cite all references used and include them on the reference page.

How to reference a website in APA style

Structure: Last Name, F. (Year Published). Article title. Retrieved from URL

Example: Young, A. (2015). More on operating systems. Retrieved from www.os.com

How to cite a source in APA style

Structure: (Last Name, Year Published).

Example: (Young, 2015).

For more information on APA style formatting, go to APA Style Central under Academic Resources of this course or visit the Writing Center.