CYB 410 Project One Stepping Stone Two Guidelines and Rubric

Business Impact Analysis

Overview

A business impact analysis (BIA) assesses the impact of disruptions to organizational operations. This document is used by organizations during catastrophic events that stop those operations. It is important to create a contingency plan before disaster strikes so you and your organization are set up to make the best possible decisions in the shortest amount of time when stressors can be at a maximum. The best plans are built when you can put yourself in a mindset that appreciates the urgency of the decisions that must be made. For example, if the point of sales systems are down for your organization, having a detailed resolution plan can help prevent loss of revenue and consumer confidence. A BIA captures very practical measurements of maximum tolerable downtime (MTD), recovery time objective (RTO), and recovery point objective (RPO). It is critical to business operations that you know these metrics and set them correctly. Incidents will happen, and that is okay if you are prepared.

For this stepping stone, you will complete the metrics for MTD, RTO, and RPO. Your leadership has already begun completing the BIA for Green Thumb Nursery, so it is your task to help them finish it by completing the Estimated Downtime Table. While this is usually a task for a more senior cybersecurity leadership position, this is great exposure to prepare you for such tasks in your career and to provide insight into how these decisions are made, which will inevitably affect you in your position as a cybersecurity analyst.

This stepping stone prepares you for Project One, which is due in Module Six.

Scenario

You are part of a cybersecurity consultant firm that has been hired by Green Thumb Nursery to help develop its risk management plan. The initial round of on-site, in-person interviews has already been conducted by your leadership, and you are tasked with helping them complete the finalized documentation for the business impact analysis.

Prompt

Complete the Project One Stepping Stone Two Template: Estimated Downtime Template for the business, which is linked in the What to Submit section below.

You must address the critical elements listed below.

1. Ordering Supplies
   1. Identify realistic RTO value.
   2. Identify realistic RPO value.
   3. Justify the values identified for this business process.
2. Processing Customer Transactions
   1. Identify realistic MTD value.
   2. Identify realistic RPO value.
   3. Justify the values identified for this business process.
3. Creating Security Reports
   1. Identify realistic MTD value.
   2. Identify realistic RTO value.
   3. Justify the values identified for this business process.
4. Tracking Grow Technique Data
   1. Identify realistic RTO value.
   2. Identify realistic RPO value.
   3. Justify the values identified for this business process.
5. Creating Safety Reports
   1. Identify realistic MTD value.
   2. Identify realistic RTO value.
   3. Justify the values identified for this business process.
6. Logging/Tracking Product
   1. Identify realistic MTD value.
   2. Identify realistic RPO value.
   3. Justify the values identified for this business process.

 BUS6600: Survey of Business Concepts 

M3 - Quiz
Started: Feb 1 at 10:25am

Score for this quiz: 100 out of 100

Question 1                      4 pts
A __________ allows workers to work the full number of hours per week in fewer days.

• compressed workweek
• flextime plan
• maximum plan
• double shift plan

 
Question 2                     4 pts
Computer and robotics training is sometimes performed in a nearby classroom-type setting. We refer to this near-the-job-training as

• orienteering.
• apprenticeship training.
• mentoring.
• vestibule training.

 
Question 3                       4 pts
Today, fringe benefits account for more than __________ percent of total payroll costs.

• 24
• 18
• 30
• 6

 
Question 4                      4 pts
Which statement is the most accurate description of the impact the Americans with Disabilities Act of 1990 (ADA) has on businesses?

• ADA has had no real impact, since most businesses have always been sensitive to the needs of disabled workers.
• Most firms are finding that some accommodations required by ADA are more difficult to implement than the structural changes.
• Businesses have found that even with the changes required by ADA, disabled workers are simply not capable of handling most types of jobs.
• Most firms have found that the structural changes needed to comply with ADA requirements have been very difficult and expensive to implement.

 
Question 5                     4 pts
Which statement best describes the current view of the role of human resource management within a firm?

• Human resource management is largely a clerical function that involves keeping records, processing payroll, and making sure that federal regulations are met.
• Human resource management functions have become so important that in many firms all managers now perform them.
• Changes in technology have largely done away with the need for a separate human resource department.
• Human resource management has become so complex that only highly trained specialists should make human resource decisions.

 
Question 6                      4 pts
Two advantages of using __________ to fill open positions are: (1) it improves the morale of current employees, and (2) the person filling the position is already familiar with the organization's culture and procedures

• external sources
• unskilled workers
• apprenticed workers
• promotions from within

 
Question 7                      4 pts
The first step in the employee selection process is

• placing a help wanted ad.
• aptitude testing.
• the initial interview.
• obtaining complete application forms.

 
Question 8                      4 pts
Pre-employment physical examinations are

• an excellent way to screen out employees.
• legal in some states, but only if given to everyone applying for the position.
• illegal under current employment legislation in all 50 states.
• legal in all states, but seldom used.

 
Question 9                      4 pts
Which statement about team pay is the most accurate?

• Most managers have concluded that team pay methods are so complex and difficult to administer that they have gone back to pay plans based on rewarding workers for their individual achievements.
• Team pay plans should emphasize individual rewards since the team can succeed only if all individuals are highly motivated to work as hard as possible.
• Although individuals who make an outstanding contribution should be recognized and rewarded, a pay system based strictly on individual performance can undermine the cohesiveness teams need to meet their goals.
• Most managers are very satisfied with the team-based pay programs that are currently in place.

 
Question 10                      4 pts
A __________ is a statement that identifies the minimum qualifications required of a worker in order to perform a specific job.

• job specification
• performance criteria review
• human resource inventory
• job description

 
Question 11                      4 pts
An important U.S. government organization charged with setting human resource management guidelines is

• the EEOC (Equal Employment Opportunity Commission).
• the WPA (Works Progress Administration).
• the OSHA (Occupational Safety and Health Administration).
• the MPDA (Manpower Development Administration).

 
Question 12                     4 pts
The __________ method is a pay system that is based on job tiers, with each tier having a strict pay range.

• Hay
• Steiner
• Gantt
• Gilbreth

 
Question 13                      4 pts
A __________ is a check of a potential employee's work record, academic record, credit history, and recommendations.

• background investigation
• character review
• fidelity appraisal
• personality profile

 
Question 14                      4 pts
The National Institute of Health estimates that each drug abuser can cost an employer approximately __________ annually.

• $500
• $10,000
• $5,000
• $1,000

 
Question 15                      4 pts
The presence of formal labor organizations in the United States dates back to the

• Civil War.
• depression years of the 1930s.
• late 1800s.
• late 1700s.

 
Question 16                      4 pts
The AFL originally was a federation of craft unions that did not attempt to organize industrial unions. The main reason for this strategy was that

• most industrial unions had supported the Knights of Labor in a dispute with the AFL during the 1880s.
• the leaders of the AFL believed that the skilled workers represented by craft unions would have better bargaining power than unskilled workers.
• craft unions had more political clout than industrial unions.
• industrial unions were illegal until the passage of the Taft-Hartley Act in 1947.

 
Question 17                      4 pts
If management and union officials cannot resolve a grievance, a(n) __________ is asked to listen to the arguments of each side and to make a decision that both sides will have to comply with.

• manager
• counselor
• mediator
• arbitrator

 
Question 1                      4 pts
Historically, the most potent union tactic when collective bargaining efforts break down has been the

strike.

primary boycott.

lockout.

court injunction.
 
Question 19                      4 pts
In its early years, the AFL's strategy was to

• grow as rapidly as possible by allowing people from all professions and walks of life to join.
• limit its membership to unskilled and semiskilled workers.
• form one big craft union which everyone could join; but it later split into several smaller organizations.
• limit its membership to skilled craftspeople.

 
Question 20                     4 pts
Workplace bullying tends to focus on abuse that is __________ in nature.

• social
• biological
• physical
• psychological

 
Question 21                      4 pts
__________ is the process by which a group of workers legally take away a union's right to represent them.

• Impeachment
• Disqualification
• Disenfranchisement
• Decertification

 
Question 22                      4 pts
A(n) __________ occurs when management temporarily closes a business to deny employment to workers.

• secondary boycott
• involuntary strike
• employment injunction
• lockout

 
Question 23                      4 pts
What is an effective way to deal with the growing threat of workplace violence?

• Ignore it, as the amount of workplace violence has actually decreased substantially.
• Ask employees that are experiencing threats or harassment to take paid leave.
• Hire proactive managers.
• Avoid disciplining employees who are not performing up to par since they will learn on the job and their performance will improve over time.

 
Question 1                      4 pts
The process of bringing in an impartial third party to render a binding decision in a labor dispute is referred to as

• arbitration.
• resolution.
• certification.
• mediation.

 
Question 1                      4 pts
__________ are workers a company hires to replace workers who are out on strike.

• Yellow dogs
• Convergent workers
• Structural replacements
• Strikebreakers

M2 - Quiz
Started: Jan 24 at 10:43pm

Score for this quiz: 100 out of 100

Question 1                                                  4 pts
Strategic planning looks at the organization as a whole, while __________ planning focuses on daily tasks and decisions.

• mission
• tactical
• operational
• contingency

 

Question 2                                                  4 pts
In traditional organizations, __________ involves giving explicit instructions to workers, telling them what to do to meet the goals and objectives of the organization.
Group of answer choices

• controlling
• budgeting
• directing
• organizing

Question 3                                                   4 pts
A vision for a company is

• very relevant for the short term, but less useful for the long term.
• a detailed plan that outlines the major organizational structure of the firm.
• an explanation of why the company exists and where it wants to go.
• the same thing as an objective.

 
Question 4                                                  4 pts
__________ is the management function of creating a vision for the organization and guiding, training, coaching, and motivating employees to help achieve the goals and objectives of the organization.

• Controlling
• Officiating
• Organizing
• Leading

Question 5                                            4 pts
The first step in the rational decision-making model is to

• develop alternative responses.
• gather data.
• recruit team members to work on the problem.
• define the situation.

Question 6                                                  4 pts
__________ skills involve a manager's ability to picture the organization as a whole and the relationships among its various parts.

• Creative
• Conceptual
• Technical
• Autonomic

Question 7                                                  4 pts
Which activity is part of the planning function of management?

• Praising a sales representative who has far exceeded her monthly sales objectives
• Assigning a particular worker to do a specific task
• Looking at market forecasts to identify future business opportunities and challenges
• Conducting a job interview with a potential new employee

Question 8                                                  4 pts
__________ involves setting the organization's vision, goals, and objectives.

• Controlling
• Directing
• Organizing
• Planning

Question 9                                                  4 pts
__________ involves recruiting, hiring, motivating, and retaining the best people available to accomplish the company's objectives.

• Planning
• Staffing
• Directing
• Leading

 
Question 10                                                  4 pts
The management function concerned with anticipating future trends and determining the best strategies to achieve an organization's goals and objectives is known as

• leadership.
• planning.
• forecasting.
• directing.

 
Question 11                                                  4 pts
__________ is choosing among two or more alternatives.

• Organizational selection
• Utility analysis
• Contingency planning
• Decision making

Question 12                                                  4 pts
A(n) __________ would be used by a department manager as a tool for making daily and weekly assignments.

• mission statement
• operational plan
• tactical plan
• vision statement

 
Question 13                                                  4 pts
The Hawthorne studies concluded that worker motivation

• was mainly determined by physical working conditions.
• was most affected by monetary incentives.
• improved when employees felt like their ideas were respected.
• increased when managers applied the scientific management approach.

Question 14                                                  4 pts
In order to understand how to motivate the various generations, we need to understand each generation's preferred mode of communication. Look at the following chart and fill in the blank cell.

Generation   :  Preferred Communication Style at Work
Traditionalists;    Face to face
Baby Boomers :   
Gen Xers:    Email
Millennials :   Technology such as social media

Group of answer choices

• meetings and conference calls
• online and social media
• by text
• by cell phone

 

Question 15                                                  4 pts
Herzberg's research indicated that employees are motivated by job content. Modern managers focus on __________ by increasing the significance of the job, and even providing the employee with important feedback.

• enriching the job
• simplifying the job
• rotating the job
• reducing the responsibilities in the job

Question 16                                                  4 pts
Which statement about high-context cultures reflects how managers in this type of culture might operate?

• As a sales professional trying to sell your product to a business that operates within a high-context culture, you may have to visit the decision makers several times and get to know them on a personal level.
• As a manager in a high-context culture, you will always stress that employees compartmentalize their work life and home life, so that each does not interfere with the other.
• Your personal life wouldnot be of concern to a manager that operates in a high-context culture.
• If you are selling your company's product to another business that has a high-context culture, it is almost guaranteed that the product or service will sell itself.

Question 17                                                  4 pts
Even across generations, employee motivation is likely to

• come from the job itself.
• remain a mystery because researchers cannot quite pinpoint where it comes from.
• develop within employees over time.
• diminish among employees who achieve at high levels.

Question 18                                                  4 pts
What is a characteristic of a high-context culture?

• Workers get right to the task, after they ease into the workday.
• Relationship building and group trust are considered very important and occur before performing business tasks.
• Workers get right to the task, without the need to socialize during the first 30 minutes at work.
• Relationship building is considered a waste of time.

 
Question 19                                                  4 pts
__________ is considered the “father” of scientific management.

• Frederick Taylor
• Elton Mayo
• Henry Gantt
• Frank Gilbreth

Question 20                                                  4 pts
The concept that a hierarchy of human needs could be used to explain motivation was developed by

• Douglas McGregor.
• Frederick Herzberg.
• Abraham Maslow.
• Frederick Taylor.

Question 21                                                  4 pts
The tendency for people to behave differently when they know they are being studied is known as the

• Hawthorne effect.
• Taylor effect.
• time-motion effect.
• self-actualization effect.

Question 22                                                  4 pts
__________ attempts to increase task efficiency by breaking down jobs into simple steps and assigning people to each of those steps.

• Job segmentation
• Job simplification
• Goal setting
• Task restriction

 
Question 23                                                  4 pts
Maslow placed __________ needs at the highest level of his hierarchy.

• esteem
• social
• deferred
• self-actualization

Question 24                                                  4 pts
According to Herzberg, the difference between motivators and hygiene factors is

• hygiene factors develop more loyalty from workers, while motivators make workers enthusiastic about moving on to a different company.
• motivators cause persons to work smarter, while hygiene factors cause people to work harder.
• motivators relate to job content, while hygiene factors have little effect on employee motivation.
• hygiene factors make employees more enthusiastic about the work itself, whereas motivators make employees enthusiastic about their next day off.

Question 25                                                  4 pts
Herzberg found that an employee’s salary

• was a hygiene factor rather than a motivator.
• was a significant motivator, but not as important as job security.
• had no effect on worker attitudes.
• was the strongest motivator.

Quiz Score: 100 out of 100

CYB 410 Module Two Activity Guidelines 

Comparing Privacy Protection Laws

Overview

Protecting personal information is an increasingly relevant issue facing both companies and individuals. In response to this, state legislation is evolving in an attempt to increase protections for customers. At the federal level, the Privacy Act of 1974 governs the personally identifiable information of individuals that is maintained by federal agencies. A need grew for legislation at the state level for additional consumer protections that wasn’t addressed by federal regulations. Because of the more needs-based way these laws developed, there is significant variation in existing state laws.

In this activity, you will explore the privacy protection laws of multiple states. When researching the laws in your own state, include such terms in your search as security breach notification, attorney general, privacy protection law, and so on.

Prompt

After reviewing the resources for this module, address the critical elements listed below.

1. Comparing Privacy Protection Laws
   1. What state from the provided resources offers the best privacy protection laws for consumers?
   2. How do these privacy protection laws compare to the state you live in? Include at least one source for your research.
   3. As a consumer, would you change anything about the privacy protection laws in the state you live in?
   4. Does reviewing the notifications of breaches from the state of California make you reconsider your consumer habits? Why, or why not?

What to Submit

Your submission should be 2–3 pages in length. Use double spacing, 12-point Times New Roman font, and one-inch margins. Any citations should be cited according to APA style. Use a file name that includes the course code, the assignment title, and your name—for example, CYB_123_Assignment_Firstname_Lastname.docx.

 BUS6600: Survey of Business Concepts | M1 - Quiz

Score for this quiz: 100 out of 100

Submitted Jan 14 at 8:18pm

This attempt took 22 minutes.

Question 1                                            4 pts
Which statement best describes the main difference between B2B and B2C transactions?

• B2B transactions involve sales in foreign markets while B2C e-commerce is restricted to domestic markets.
• B2B transactions involve transactions where the buyers and sellers are both businesses, while B2C involves transactions between businesses and consumers.
• B2B transactions focus on financial transactions while B2C e-commerce focuses on the sale of manufactured goods.
• B2B transactions refer to business between nonprofit organizations while B2C e-commerce is carried out by business firms seeking to earn a profit.

 
Question 2                                            4 pts
When we compare the factors of production in wealthy versus poor nations, we find

• poor and wealthy nations (both) have an abundance of knowledge; it is the land that varies, with rich nations always having more.
• poor nations have plenty of land and knowledge, but very little labor.
• wealthy nations have land and labor, while poor nations have capital and entrepreneurship.
• wealthy nations have knowledge and entrepreneurial opportunities, while poor nations are often lacking in these areas.

 
Question 3                                            4 pts
Efficiency in distribution systems around the world has led to

• reduced standards of living around the world.
• increased world trade.
• decreased world trade.
• decreased international competition.

Question 4                                            4 pts
An entity that seeks to earn a profit by providing a good or service is known as a(n)

• industry.
• service.
• business.
• corporation.

Question 5                                            4 pts
World trade has both benefits and costs. Which statement best attests to this fact?

• Engaging in international trade can significantly lower the costs of parts and products, but it also carries the risk of substantial disruptions if supply chain issues arise.
• Economists are convinced that global job creation will never occur if our politicians support world trade.
• The standard of living for citizens in developing nations has significantly decreased due to globalization.
• The U.S. economy and all businesses that participate in this economy were negatively impacted by recent wars.

Question 6                                             4 pts
The service industry represents about __________ of U.S. workers.

• 25%
• 45%
• 65%
• 85%

Question 7                                            4 pts
Two factors of production that seem to contribute the most to a nation's ability to create wealth are

• land and capital.
• entrepreneurship and labor.
• entrepreneurship and knowledge.
• land and labor.

Question 8                                            4 pts
Greening refers to

• the need for more carbon dioxide in our air.
• firms acquiring more greenbacks (U.S. dollars) from world trade.
• the agricultural industry's push to develop and produce new green vegetables to feed the world.
• finding ways to save energy and lessen the harm on our environment.

Question 9                                            4 pts
Employers provide tools and technology for their employees in order to

• increase the cost of production and profitability.
• improve their efficiency and productivity.
• reduce corruption in business and eliminate scandals.
• encourage the private ownership of businesses.

Question 10                                             4 pts
The threat of terrorism more often __________ the cost of operating a business.

• decreases
• stabilizes
• determines
• increases

Question 11                                            4 pts
In order to compete well and gain market share, contemporary businesses are changing to be more

• customer-driven.
• production-driven.
• cash-driven.
• management-driven.

Question 12                                            4 pts
What is the most accurate statement about the impact of business on society?

• When businesses earn a profit for their owners, they usually do so at the expense of the rest of society, which proves it is never a win-win situation.
• Businesses can have a positive impact on both the standard of living and the quality of life within a society.
• Businesses often improve the quality of life, but can do little to improve the standard of living for most people.
• While businesses often improve the standard of living within a society, they can do little to improve the quality of life.

Question 13                                             4 pts
__________ unemployment refers to persons who purposefully quit their jobs and have not yet found a new job.

• Frictional
• Seasonal
• Structural
• Cyclical

 
Question 14                                            4 pts
Which policy suggests Keynesian economic theory?

• proposing long-term solutions in order to create wider swings in the business cycle
• creating a national banking system that owns and operates most of the global and regional banks
• reducing government involvement in the free-market economy
• short-term increases in government spending to stimulate the economy

 
Question 15                                            4 pts
Which topic would be emphasized in a microeconomics class?

• how market conditions determine the price of a specific product
• the nation's unemployment rate
• how a nation's GDP is computed
• how the government can provide adequate health care

Question 16                                            4 pts
An oligopoly is a market that is characterized by

• several small firms that compete primarily by differentiating their products.
• a few large sellers who dominate the market.
• a large number of small companies all producing very similar products.
• one seller that totally dominates the supply of the product.

Question 17                                            4 pts
Thomas Malthus was pessimistic about the ability of a society to achieve high standards of living for most of its citizens because he believed that

• the wealthy will never promote freedom of choice for workers.
• high tax rates would eventually undermine people's incentives to work hard and create wealth.
• significant population growth would result in shortages of food and resources.
• government has a natural tendency to run deficits that would eventually bankrupt a nation.

Question 18                                             4 pts
Today, the economic systems of most nations could most accurately be classified as

• command economies.
• pure socialism.
• pure capitalism.
• mixed economies.

Question 19                                            4 pts
Just a few sellers dominate the markets for laundry detergents, soft drinks, and automobiles. Economists would classify these markets as

• perfect competition.
• oligopolies.
• monopolistic competition.
• monopolies.

Question 20                                            4 pts
Which statement about capitalism is the most accurate?

• A drawback of capitalism is that people have little freedom to pursue their own goals.
• Capitalism is characterized by unequal distribution of wealth and income.
• A strength of capitalism is its ability to deal with environmental problems.
• In capitalist economies, most resources are owned by the government.

Question 21                                            4 pts
The __________ system provides the least incentive to work hard or to produce quality goods or services.

• mixed economy
• socialist
• communist
• capitalist

 
Question 22                                            4 pts
When the supply curve and demand curve for a particular good are shown together on a single graph, the point at which the two curves intersect identifies the

• amount of time it takes to bring together the buyers and sellers of the good.
• total profit earned by producers.
• total amount of labor needed to produce the good.
• equilibrium price of the good.

Question 23                                             4 pts
The quantity of a good or service that producers are willing to sell at different prices during a specific time period is known as the

• utility of that product or service.
• demand for that product or service.
• elasticity of that product or service.
• supply of that product or service.

 
Question 24                                            4 pts
A command economic system is characterized by

• reliance on the forces of supply and demand to determine what is produced.
• an extremely rapid rate of economic growth.
• reliance on the government to determine what is produced and who gets the output.
• freedom of choice and freedom of competition.

Question 25                                            4 pts
Which statement about business cycles in the United States is most accurate?
Group of answer choices

• Business cycles occur precisely every five years.
• Seasonal business cycles occur within a year.
• Business cycles are impossible to identify.
• Long-term business cycles have only two phases—boom and bust.

A free market is one where decisions regarding what and how much to produce are made by the market itself. This market is made up of buyers and sellers negotiating prices for goods and services. It is generally accepted that there are four degrees of competition within a free-market system. These include perfect competition, monopolistic competition, oligopoly, and monopoly.

One benefit of the free market is that it allows open competition among companies. Businesses must provide customers with high-quality products at fair prices with good service. If they don't, they lose customers to businesses that do.

Select the degree of competition that best describes each listed industry or business based on the description.

Automotive Industry: In this industry, there are a few sellers that tend to dominate the market.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Beef Industry: There are many different suppliers of these products, which prevents any one of them from setting prices.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Soda Industry: In this industry the products are very similar, although consumers perceive them as being very different.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Agricultural Commodities: There are many different growers of these products, which prevents any one of them from setting prices.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Airline Industry: In this industry, there are a few sellers that tend to dominate the market.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Athletic Shoe Industry: In this industry the products are very similar, although consumers perceive them as being very different.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

ACME Light and Power: Through special legislation, this supplier is the sole provider of electricity to its local municipalities.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Cable Television Industry: In smaller markets, one company is the sole provider of cable television service to consumers in local municipalities.

• Perfect Competition
• Monopolistic Competition
• Oligopoly
• Monopoly

Overview

Journals are private and between you and the instructor only. Approach these activities as an opportunity to reflect upon and apply what you learn each week based on the assigned readings, discussions, and activities. As a successful professional, you will need good reflective and writing skills. Journal activities offer you the opportunity to develop these skills further. The journal entries in this course are graded separately.

Prompt

First, complete the assigned readings for the week. Then discuss the importance of prioritizing cybersecurity risk when it comes to protecting sensitive data, maintaining trust with stakeholders, and mitigating financial and reputational harm. Your entry should include some thoughts on how increased cybersecurity awareness and proactive risk management contribute to a safer and more resilient digital environment for all.

Your journal entry should be 2 paragraphs long and fully address the prompt provided.

In your response, you must address the following critical elements:

1. Critical Thinking and Reflection: Support the claims with relevant examples of previous and logical thought processes.
2. Integration and Application: Show good depth of knowledge of the module content and demonstrate that the module content has been read.
3. Voice: Write in a style that is appropriate for the intended audience and use a consistent voice throughout.

What to Submit

Submit your journal assignment as a Microsoft Word document with double spacing, 12-point Times New Roman font, and one-inch margins. Responses should be at least 2 paragraphs long and address the points indicated in the journal prompt for each module.

Possible Points: 30

Begin by introducing yourself to the class. Include your major and anything you would like to share about yourself. Then address the prompt below.

For your initial post, think about your own personal data and the devices you use at home. In what areas are you the most vulnerable? You might consider areas such as saving passwords in a browser, buying products online, using social media, or saving photos in the cloud. What are your critical risks from these vulnerabilities? Have you taken any steps to address those risks? If so, what have you done?

In your response posts, evaluate which tenet of the confidentiality, integrity, and availability (CIA) triad is most affected by your classmates’ identified risks. Examine how that tenet could be used to inform good decision making.

To complete this assignment, review the Discussion Rubric.

CJ 4440 Final Exam: Week #9: December 9 - December 15, 2024 
Attempt 1 
Score for this quiz: 34 out of 35
Submitted Dec 12 at 4:26am
This attempt took 126 minutes.

 
Question 1             1 / 1 pts
1. Which Sri Lankan terrorist front organizations used varying measures to obtain financial and political support?

A) Harakat-ul-Ansur (HUA)

B) The Lal Masgid (Red Mosque)

C) Federation of Associations of Canadian Tamils (FACT)

D) Lashkar-e-Taiba (Army of the Pure)

 
Question 2                   1 / 1 pts
2. Which country was the first to provide trained and armed "Sky Marshals" on airplanes to prevent hijacking of commercial airlines?

A) Israel

B) United States

C) England

D) France
 
Question 3                                   1 / 1 pts
3. Which step is not part of the security risk assessment related to managing and mitigating potential threats?

A) Examination of steps already completed to reduce risks and hazards

B) Unstructured and limited examination of existing risks and hazards

C) Further steps to reduce risks and hazards

D) Systematic examination of significant hazards that can provide harm

 
 
Question 4                                  1 / 1 pts
4. Under Homeland Security Presidential Directive 6, the Department of Homeland Security Security established Terrorist Screening Centers (TSCs) in September 2003 to consolidate the watch list for the lawful use of terrorist information in screening processess.

• True 
• False 

 
Question 5                                             1 / 1 pts
5. According to the United Nation, the United States failed and allowed the genocide in Rwanda in 1994.

• True 
• False 

 
Question 6                               1 / 1 pts
6. Historically drugs activities in Central America has not been used to significantly aid terrorism in that region.

• True 
• False 

 
Question 7                                 1 / 1 pts
7. The USA Patriot Act was enacted with nearly partisan votes in both the Senate and House to provide law enforcement with new authority to enhance detection and prevention of terrorism.

• True 
• False 

 
Question 8                                       1 / 1 pts
8. The British government defines terrorism as "any activity that involves an act that is dangerous to human life or potentially destructive of critical infrastructure or key resources;..."

• True 
• False 

 
Question 9                              1 / 1 pts
9. Based on your reading which of the government agency listed define terrorism as "is intended to produce fear in someone other than the victim"?

A) Federal Bureau of Investigation (FBI)

B) U.S. Department of State

C) U.S. Department of Defense (DOD)

D) U.S. Department of Homeland Security (DHS)

 
Question 10                                1 / 1 pts
10. Which U.S. President ignored Russian action in the south Caucasus region because Vladimir Putin support the U.S. role in combating terrorism?

A) Bill Clinton

B) George W. Bush

C) Barrack Obama

D) Donald Trump

 
Question 11                                       9 / 10 pts
Assume you are the outgoing Department of Homeland Security (DHS) Secretary on January 1, 2025, nineteen days before the inauguration of the 47th President of the United States. DHS received an in-person classified briefing from the Director of the Central Intelligence Agency (CIA) and the Director of the Federal Bureau of Investigation (FBI) regarding the CIA's creditable human asset who has passed several polygraph examinations revealing that at least 19 terrorists are planning to enter the United States over the next two weeks and planned to launch multiple attacks on this nation during the inauguration on January 20, 2024. Based on your reading and knowledge gained during this course, describe what authority and tools are available within the current national security apparatus to prevent this potential terrorist incident. Consider using and describing such important assets as the Terrorist Screening Centers (TSCs) and the Foreign Intelligence Surveillance Court (FISA Court) in your well-written essay. Because the inauguration is held at the United States Capitol, is additional authority granted for law enforcement and intelligence operations to include engagement with the FBI and CIA to detect, arrest, and prevent potential terrorism on January 20, 2024? To receive full credit, a well-written essay will have between 300 and 400 words with at least three (3) in-text citations and three (3) different references listed below the essay. 

Excellent grammar with references and in-text citations is required, with attention to the accurate use of quotations.

Students are reminded to use only their work production for this assignment with strict attention to the following plagiarism policy:

Your Answer:
As the outgoing Secretary of Homeland Security, I understand the urgency of deploying every available authority and tool to counter the credible terrorist threat targeting the 2025 inauguration. Under the Homeland Security Act of 2002 and the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act, the Department of Homeland Security (DHS) has significant authority to coordinate nationwide counterterrorism operations and enhance intelligence sharing among agencies, including the Federal Bureau of Investigation (FBI) and the Central Intelligence Agency (CIA). A key resource in these efforts is the FBI’s Terrorist Screening Center (TSC), which maintains the Terrorist Screening Database (TSDB). This database allows the identification and vetting of individuals traveling into or within the United States (US), with enhanced screening facilitated by Customs and Border Protection (CBP) and the National Targeting Center (NTC) at ports of entry (Radvanovsky & McDougall, 2023).

In addition to these measures, the Foreign Intelligence Surveillance Court (FISA Court) provides a critical legal avenue for monitoring suspected terrorists. Through the Foreign Intelligence Surveillance Act (FISA), in collaboration with the FBI and CIA, DHS can secure ..... [ BUY TO SEE FULL ANSWER ]

Question 12                                         15 / 15 pts 

Based on your reading about the historical foundation of terrorism and the rise of Islamic extremism in the Middle East, should the United States continue its military engagement in that region or change foreign policy to include the withdrawal of civilians and military troops and reduction of funding for counterterrorism program in the region? To receive full credit, your well-written essay will have between 350 and 450 words, with at least three in-text citations and three different references listed below the response. Your well-written essay response must be relevant and provide an analysis of the justification for your position with data on the overall goal of the United States' current foreign policy concerning counterterrorism with the use of funding and military intervention in the Middle East as part of our national security strategy. In essence, can the tools and authority granted within the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism legislation continue to prevent terrorism in the United States without deployment of armed forces in the Middle East as a deterrent to terrorism? 

This is an essay response, not a discussion board posting, and good grammar with references and in-text citations is required.  

Your Answer:
The United States (U.S) military engagement in the Middle East has long been critical to its counterterrorism strategy. Still, the question remains whether continued military involvement is the most effective approach. I will evaluate the justification for U.S. military presence in the region and the potential for a strategic shift toward non-military counterterrorism efforts, particularly in light of the provisions established under the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act.

The main goal of U.S. counterterrorism policy is to prevent terrorist attacks against American interests and citizens. Military interventions, particularly in Iraq and Afghanistan, have aimed at disrupting terrorist networks, eliminating key figures, and preventing safe havens for groups like al-Qaeda and ISIS (Islamic State of Iraq and Syria). However, prolonged military presence in the region has also contributed to anti-American sentiments and served as .... [ BUY TO SEE FULL ANSWER ]

System and Communication Security Paper

Overview

As you have learned, this course employs a targeted approach to measuring your mastery of the course competencies. Your competency project for this course is a composition demonstrating mastery of the key skills in automating security-relevant tasks, implementing public key infrastructure (PKI) technology using a certificate authority (CA) server, and hardening computer systems. PKI is a common protection technology used in the industry and comes in many different forms. Using a CA server is one method that provides security to a large infrastructure. Important skills for a security analyst are automating security controls to save time and resources. This can be done through hardening scripts and system checklists.

The project is divided into three milestones, which will be submitted at various points throughout the course to scaffold learning and ensure quality final submissions. In Milestone One, due in Module Three, you will develop an automated script and submit your Milestone One Worksheet. In Milestone Two, due in Module Four, you will submit your completed checklist and analysis Word document. In Milestone Three, due in Module Five, you will submit your Milestone Three Worksheet. The final product will be submitted in Module Seven. Some of its parts will require the CYB 300 Sandbox environment.

In this assignment, you will demonstrate your mastery of the following course competencies:

• Implement a public key infrastructure (PKI)
• Securely configure (harden) a common computer operating system according to appropriate security standards and organizational requirements
• Use a scripting language to automate security-relevant tasks

Scenario

Part I
In Milestone One, you developed a script to create a baseline for newly acquired computer assets. In this project, some of these assets are being relocated to a remote location with additional requirements. Develop a script to implement this new baseline configuration to meet the following requirements:

1. Rename computer to First Initial_Last Name (use your first initial and your last name)
2. Change time zone to the time zone associated with Denver, Colorado
3. Get a list of running processes
4. Set idle lock time for screensaver to 3 minutes
5. Send the output of the last 50 entries in the /var/log/messages log to a text file named “SecurityLog_LastName.txt”

Part II
For this part, you will document the commands to create a CA. As a result of relocation, in addition to the scripts associated with the baseline hardening, you need to create a new CA for this remote location that meets the following set of security requirements:

1. Hash value = SHA256
2. Key type = AES 256
3. Key length = 4096
4. Common Name = CN = Colorado Office Root, C=US, ST-CO,O-your_name-Org
5. Validity period = One Year

Part III
For this part, you will discuss the importance of industry guidelines, organizational baselines, and checklists as they pertain to system and communication security.

Prompt

You must address the critical elements listed below. Most of the critical elements align with the competencies (shown in brackets).

1. Automated Hardening Scripts: Compose a single executable script to automate hardening tasks to meet the requirements in the scenario.
   1. Screenshot of a single executable script in the Linux shell environment
   2. Screenshots that evidence each requirement has been met
   3. One of the main reasons that practitioners use automated scripts is to save time by avoiding manual configurations. Describe additional benefits of using automated scripts for configuring systems in a secure manner for organizations.
2. Certificate Authority:
   1. Provide a screenshot of the OpenSSL commands to create a CA with settings that meet the organizational requirements
   2. Discuss how to create Certificate Signing Requests (CSRs) for the servers and workstations in the new location and submit to the CA for approval (CA Applied)
   3. Discuss how implementing PKI addresses two of the Fundamental Security Design Principles and how this maintains the tenets of the confidentiality, integrity, and availability (CIA) triad in an organization
3. Hardening Systems:
   1. Discuss how to make the transition from industry guidelines to a baseline that is appropriate for your organization
   2. Create an operating system security-configuration checklist representing the elements used in Part I: Automated Hardening Scripts
   3. Explain why operating system security-configuration checklists are an important part of the cybersecurity practices in an organization