Evaluate the steps that Dave Ballard and Nick Francesco took in response to the Dean's

email informing them that his laptop had been stolen. Which steps were effective, and

which steps needed improvement? Justify your reasoning by articulating your own

criteria for effective or ineffective incident response.

$2.$ Consider the role of Dean of the Saunders College of Business, including his roles as a

leader, spokesperson, fundraiser, and manager. In supporting the many activities the

Dean performs every day, how do digital assets on his laptop help him? What specific

categories of information does he keep on that machine, according to the case? What

other information might he store on his laptop, given the work that he does?

$3.$ What strengths and weaknesses do you see in the COB InfoSec controls and incident

response activities? What are lessons the two main players, Dave Ballard and the Dean,

learned from this episode? What other lessons should they have learned?

$4.$ The case ends with Dave Ballard and the Dean feeling "All's Well that Ends Well".

Although the increased use of laptops, smart phones, tablets, phablets and other

mobile devices improve employees' ability to perform work or collaborate anytime,

anywhere, they also dramatically increase organizations' risk exposure. Assume you

have been hired to modify RIT's Information Security Policy and Acceptable Use Policy

$($case Exhibits $4$ and $5)$ so as to incorporate information security best practices related

specifically to mobile devices, including laptops, smartphones, and tablets. What

specific new policies, procedures and controls would you recommend, and how do you

want to modify existing policies, procedures, and controls?