Unit 1 Discussion

Contains unread posts

Sets and Subsets- (My name is Christina Lynn Sentelle)

The ability to classify items into sets is important in many contexts. For example, the registrar of a university puts students into classes. Each class can be considered a set. It can also be considered a subset of the entire student population. The admissions officer puts students into majors. Again, each major can be considered a subset of the entire student population. At graduation, students need to be put into groups with similar GPAs for honors, groups with similar degrees, or groups from different schools within the university. On this Unit’s Discussion Board, you will investigate sets, subsets, and proper subsets making at least three posts as described below.

Post 1

• Using your first, middle, and last name, create a universal set and write it in roster notation. If you do not have a middle name, use your first and last name only. My name is Christina Lynn Sentelle)
• List all the subsets of your universal set.
• How many subsets did you list? How do you know how many subsets a set will have?
• List all the proper subsets of your universal set. Are all subsets of a set also proper subsets of a set? Why or why not?

Review an example of a response for this Discussion.

Post 2

• Choose one of your classmates’ posts and using the letters of either their first, middle or last name, create a set and write it in roster notation.
• Determine the number of distinct subsets of the set. (Second student name is Brooklyn Crew)
• Determine the number of distinct proper subsets of the set.

Review an example of a response for this Discussion

Post 3

• Watch the video, “How to Learn Math: Four Key Messages” found here: https://www.youcubed.org/resources/four-boosting-messages-jo-students/. Share something from the video that you think is helpful. How do you think it can help you in this class?

US critical infrastructure-power—water, oil and natural gas, military systems, financial systems—have become the target of cyber and physical attacks as more critical infrastructure systems are integrated with the Internet and other digital controls systems. The lesson learned in defending and mitigating cyberattacks is that no entity can prevent or resolve cyberattacks on its own. Collaboration and information sharing is key for success and survival.

This is a group exercise, representing collaboration across all sectors, to support and defend US critical infrastructure. In the working world, a team like this would include some agencies, some industrial partners, and some private sector corporations. Each organization has different strengths and skills, different access to information, and different authorities to report to. When the sectors work together and leverage resources and skills, the result is that everyone benefits from the defense and protection of US IT infrastructure. In your teams, you can model the same collaboration, leveraging each other’s expertise, sharing each other’s knowledge, teaching each other, and providing contributions specific to your role in the scenario.

Financial Services Representative: special task in Step 3

Law Enforcement Representative: special task in Step 4

Intelligence Agency Representative: special task in Step 5

Homeland Security Representative: special task in Step 6

There are seven steps that will help you create your final deliverables. The deliverables for this project are as follows:

Security Assessment Report (SAR): This report should be a 14-15 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.

After Action Report (AAR): This report should be a 10-15 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.

This is a 5-8 slide PowerPoint presentation for executives along with a narrated or In-Class Presentation summarizing your SAR and AAR report.

When you submit your project, your work will be evaluated using the competencies listed below. You can use the list below to self-check your work before submission.

1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.

2.3: Evaluate the information in a logical and organized manner to determine its value and relevance to the problem.

4.1: Lead and/or participate in a diverse group to accomplish projects and assignments.

4.3: Contribute to team projects, assignments, or organizational goals as an engaged member of a team.

10.6: Possess knowledge of proper and effective communication in case of an incident or crisis.

Your team is assembled and you have a plan. It’s time to get to work. You have a suite of tools at your disposal from your work in Project 1, Project 2, and Project 3, which can be used together to create a full common operating picture of the cyber threats and vulnerabilities that are facing the US critical infrastructure. Begin by selecting the following links to brush up on your knowledge:

1. network security
2. mission critical systems
3. penetration testing

To be completed by all team members: Leverage the network security skills of using port scans, network scanning tools, and analyzing Wireshark files, to assess any suspicious network activity and network vulnerabilities.

Step 3: The Financial Sector

To be completed by the Financial Services Representative: Provide a description of the impact the threat would have on the financial services sector. These impact statements can include the loss of control of the systems, the loss of data integrity or confidentiality, exfiltration of data, or something else. Also provide impact assessments as a result of this security incident to the financial services sector.

To be completed by all team members: Provide submissions from the Information Sharing Analysis Councils related to the financial sector. You can also propose fictitious submissions. Also, review the resources for Industrial Control Systems, and advise the importance of them to the financial services sector. Explain the risks associated with the Industrial Controls Systems.

Step 4: Law Enforcement

To be completed by the Law Enforcement Representative: Provide a description of the impact the threat would have on the law enforcement sector. These impact statements can include the loss of control of systems, the loss of data integrity or confidentiality, exfiltration of data, or something else. Also provide impact assessments as a result of this security incident to the law enforcement sector.

Step 5: The Intelligence Community

To be completed by all team members: Provide an overview of the life cycle of a cyber threat. Explain the different threat vectors that cyber actors use, and provide a possible list of nation-state actors that have targeted the US financial services industry before.

Review this threat response and recovery resource and use what you learned from the resource to provide or propose an analytical method in which you are able to detect the threat, identify the threat, and perform threat response and recovery. Identify the stage of the cyber threat life cycle where you would observe different threat behaviors. Include ways to defend against the threat, and protect against the threat. Provide this information in the SAR and AAR.

To be completed by the Intelligence Community Representative: Provide intelligence on the nation-state actor, their cyber tools, techniques, and procedures. Leverage available threat reporting such as from FireEye, Mandiant, and other companies and government entities that provide intelligence reports. Also include the social engineering methods used by the nation-state actor and their reasons for attacking US critical infrastructure. Include this information in the SAR and AAR.

Step 6: Homeland Security

To be completed by the Homeland Security Representative: Use the US-CERT and other similar resources to discuss the vulnerabilities and exploits that might have been used by the attackers.

Explore the resources for risk mitigation and provide the risk, response, and risk mitigation steps that should be taken if an entity suffers the same type of attack.

To be completed by all team members: Provide a risk-threat matrix and provide a current state snapshot of the risk profile of the financial services sector. These reports will be part of an overall risk assessment, which will be included in the SAR and AAR.

Review and refer to this risk assessment resource to aid you in developing this section of the report.

Step 7: The SAR and AAR

All team members: After you compile your research, and your own critical assessments and analysis, determine which information is appropriate for a Security Assessment Report (SAR) that will be submitted to the White House, and an After Action Report (AAR) that will be submitted to the rest of the analyst community.

1. Prepare your SAR for the White House Cyber National Security Staff, describing the threat, the motivations of the threat actor, the vulnerabilities that are possible for the threat actor to exploit, current and expected impact on US financial services critical infrastructure, the path forward to eliminate or reduce the risks, and the actions taken to defend and prevent against this threat in the future.
2. Prepare the AAR. This knowledge management report will be provided to the cyber threat analyst community, which includes the intelligence community, the law enforcement community, the defense and civilian community, the private sector, and academia. The purpose of the AAR is to share the systems life cycle methodology, rationale, and critical thinking used to resolve this cyber incident.

The deliverables for this project are as follows:

1. Security Assessment Report (SAR): This report should be a 14-15 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
2. After Action Report (AAR): This report should be a 10-15 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
3. A 5-8 slide PowerPoint presentation for executives along with narration or In-Class presentation by each team member summarizing a portion of your SAR and AAR report.

The Capstone Project will require you to submit a research paper and present to the class your findings.

The Capstone Project requires you to take a deep dive into a security incident such as Target, OPM, or Equifax’s cyber breach.

Students will review the incident from the lens of a CISO before, during, and after the breach to determine the impact of the event. Each breach will require an analysis of the security models, methodologies, policies, standards, procedures, and technologies in place before and after the incident. The organization should be critiqued for their management of the incident including the disclosure of the breach, follow-up with affected stakeholders, and both the short and long-term impacts of the breach from a company, industry, and national perspective. When possible, students should identify the attackers and the attack vectors used to compromise the system(s). Furthermore, students should provide guidance and strategies for companies to prevent and mitigate similar attacks.

The grading rubric and additional details are attached.

Rough Draft Review Process Evaluation

Purpose: The primary goal of this weekly assignment is to enable you to understand the revision process and revise your paper with the help of a writing specialist.

Prepare: After you have completed a rough draft of your paper (at least five pages), submit that draft to the Ashford Writing Center. To do this, click on the Writing Center & Library link located in the left course navigation and from there, you will click on the tab marked Paper Review. To submit your paper, follow the instructions provided. Your paper will be returned within 24 hours, so give yourself enough time to complete and submit it prior to the due date. See image below that illustrates how you can access Paper Review through the Ashford Writing Center.

Reflect: Carefully review the revision letter and the margin comments that you see on your returned paper. Consider each of the suggestions provided to help you to revise your paper.

Write: In your written response of at least 400 words, complete the following:

• Identify the top three issues your writing specialist focused on in your rough draft (e.g., paragraph structure, proper use of quotations, and thesis statement).
  • Were any of those issues surprising?
• Describe what you learned from some of the feedback your writing specialist provided as explanations.
  • Was this feedback helpful?
• Evaluate the usefulness of the paper review tool.
  • Did your understanding of academic writing improve?
  • Will you use the Ashford Writing Center to review your work in the future? Why or why not?