issue stated in each scenario.

Scenario $1$

IT Admin: That last attack did some real damage! We need to add systems that identify malicious activity on our network immediately.

Security Control Remediation Needed

Functional Type

Remediation Needed

Control Remediation Needed

Functional Type Remediation Needed

Functional Type

Remediation Needed

Control Remediation Needed

Scenario $3$

CEO: Our employees are visiting bad, unsecure websites way too often, but have we even stated that they shouldn't be doing this yet?

Scenario $2$

CIO : It appears that anyone could possibly walk into the server room. We need to evaluate and ensure only authorized people can enter.

Security Control Remediation Needed

Control Remediation Needed