Please answer those discussion boards with citations.

Question 1

1414 unread replies.1414 replies.

Your organization is thinking about moving its core infrastructure into the cloud. According to an initial cost assessment, it appears to make good financial sense, as it requires less hardware to be maintained, and fewer in-house system administrators.

What are some concerns, based on concepts learned so far, that should be addressed? What actions should an executive or senior leader take to ensure this transition doesn't result in substantial cyber risks or other losses for the organization? What are some risks or practices that should be considered?

Since the organization isn't specified here, feel free to explore ideas, especially if you have a preferred organization in mind, as it may help to narrow in on concerns.

Question 2

The Information Technology department notifies you that there has been evidence of unusual behavior from a privileged user's account, in this case the Chief Financial Officer (CFO). The CFO indicates that they had received an email from a close friend with an attachment, clicked on a link, but it turned out to be junk and they ignored it. IT began their initial investigation immediately, and found that the email was likely a successful spear phishing attempt, from a similar but slightly different email address that mirrored the information of the friend's account. What actions do you recommend be taken to contain this incident, and return to normal operations? Additionally, what steps should be taken to gather evidence during this procedure, in case it is later determined that you need to contact authorities?

Question 3

Why should information assurance place such an emphasis on crisis management and business continuity when disaster recovery (recovering from an incident) is typically seen as an IT function? What are some of the benefits of integrating them? What are some secondary benefits of backup systems beyond data availability? On the opposite end of this, what kind of problems could you foresee by having business continuity disconnected from disaster recovery?