Final Project Security Plan Assessment Including Policies

Final Project Security Plan Assessment To Includepolicies Sample

Final Project – Security Plan / Assessment to Include Policies – sample or areas that they should include or address Procedures What standards do you suggest following Suggested Incident Response Plan Testing – penetration tests – internal and external Training / awareness What should the client do to prepare for the audit Final Project – Security Plan to Include Testing portion – Similar to an Ethical Hacking Plan – Someone asks you to test the system (inside and outside). What would you propose? Make it a business proposal and lay out all of the steps, naming exact tools and procedures Comment on what you could expect to find Lots of details – no simple overview, you have to have enough content to prove what you suggest will work or be of benefit Final Project Goal is to tell me what I don’t know I don’t want you to tell me the easy stuff, I need to fix that beforehand Tell me how to prepare before you come in Run the Microsoft analysis tools, patch everything, make sure policies are up to date Request authorization You need a letter protecting you so you can explore my system If you don’t have the letter – you go to jail.

Say that you will not do any destructive tests Final Project Format Professional Any business format that you choose Executive Overview Table of Contents Sections Final Project – Business Security Plan Research and build what you would put into a detailed security plan for an organization: It needs to be written as a business proposal. Can be done in teams of 2 At least a 15 page paper – of content…. Or 20 for group of 2 Business Security Plan Research and build what you would put into a detailed security plan for an organization: Policies – samples or areas that they should include Procedures – What standards do you suggest following Testing – penetration testing - Ethical hacking Internal and external Training – what training would you offer employees (details) Ethical Hacking Part The plan needs to show exact steps and procedures on how you would test security on a company.

Internal threats External threats Detailed procedures, what you expect to find Final Project Develop a Business security plan for a company (real or fictitious). It needs to include: Overall plan – General policies / procedures Ethical hacking – what tools, what do you expect as results or what are you looking for? The business owner has to understand why you are testing for certain things How would he know that he is getting what he is paying for. Security Awareness Plan – how to train employees What materials would you put on a reference list for each section? Can be a group of 2