YS 408 Management of Information Security - Week 2 Activity Complete the following activities and submit your work in a Word document. 1. Assume that a security model is needed to protect information in our course's learning management system. a. Using the CNSS model, identify each of the 27 cells needed for complete information protection. b. Write a statement that explains how you would address the components represented in each of the 27 cells. 2. Charlie and Iris met for a working lunch. "First thing you need to do," Charlie told Iris, "is gain some consensus from your higher management to fund a new position for a security analyst. Then fill it by finding someone who knows security skills but is primarily skilled in project management. Or find a strong security analyst and send them to PM training." "Why so?" Iris asked. "A good PM can help the entire team learn how to manage all the security projects to keep you from getting overwhelmed with deadlines and deliverables," Charlie said, smiling. "A good PM can make your operations proactive rather than reactive." "That sounds good," Iris replied. "What else do I need to know?" a. Based on your reading of the chapter and what you now know about the issues, list at least three other things Charlie could recommend to Iris. b. Identify what you think is the most important piece of advice and why. c. To gain consensus from your higher management on the importance of funding a security analyst, use at least three current media sources (citing them) to identify recent examples of threats to Information Security for six of the 12 threat categories mentioned in the chapter. d. Assume that Charlie then tells Iris, "I have a friend who runs a placement service and can find you exactly the right person for this position. Once you have the job posted, you can have them help you fill it. If they find you a great candidate and the placement is made, I will split the finder's fee with you." Iris knows that her company may pay as much as half a year's salary for the placement services needed for such a hire. Charlie's friend is likely to pay him a substantial finder's fee if Iris awards the placement contract to them and someone gets placed. If she can get a good employee and a little extra money on the side, everyone wins. However, Iris is not comfortable with such an arrangement, and she is pretty sure it is against company policy. i. If this comes to pass, is Charlie doing anything illegal? Is Iris? What is ethically wrong with Charlie's proposal? Provide your response to the three questions in one paragraph and include legal and ethical principles to support your position.