In your discussion of each question, focus on how you would deal with each of these situations if you were the CIO/CISO thus integrating both your business acumen and your technical knowledge. Students should feel confident exploring any industry trends and should be less concerned about getting "the right" answer. These cases allow you to think about reacting to situations before you are actually put in that situation.

Hypothetical:

As CIO/CISO, you have built a Security Operations Center at your organization with a Managed Security Service Provider after-hours coverage. You are now weighing your options on whether to also add a digital forensics capability to your organization. The suggested length is 3-5 pages.

Why would you want to add this function?

Should you add this to your organization or as a service through the MSSP?

Do you feel comfortable with your employees being deposed and acting as expert witnesses?

What are some general pros/cons that you are weighing?