Penetration testing can be conducted to test for vulnerabilities and signs of an attempted attack.Countermeasures can be instituted to address these vulnerabilities. A countermeasure is a step planned and taken in opposition to another act or potential act. Develop a set of measures to review security regularly and countermeasures to address the most common social engineering attacks. This will include physical and personnel countermeasures. rubrics below. Elements Exceeds Competency 90 - 100 Mechanics Grammar, spelling, sentence structure; Cite sources in APA format from reputable reference materials (10%) All work is in APA format with appropriately cited sources; no grammar or spelling errors.Uses complete sentences, well formed paragraphs, and graduate level word usage and complex sentence structure. Review Measures (45%) Develops a clear, logical set of measures to review security regularly to address the most common social engineering attacks.Provides support for the measures from reliable sources. Countermeasures (45%) Develops a clear, logical set of measures to review countermeasures to the most common social engineering attacks.This Includes both physical and personnel countermeasures. Provides support for the measures from reliable sources. Message From the Consulting Company Director:We have a client who has, until now, maintained their data center within their main facility.After multiple breaches, they realize that their data is a risk and they need a new secure facility just for the data center. The breaches so far have been socially engineered, with one attacker actually getting inside the data center at the main facility and removing a hard drive with sensitive information.After their CIO investigated the incident, he found that the attacker had managed to manipulate a number of employees to get information and gain access.It appears that the employees “just wanted to help” and with lack of proper training, actually aided in the attack.They are in great need of our help. What I need you to do is to work with the IT department to develop a report and plan to: Determine where to relocate the Data CenterDecide what physical security is needed to secure the siteDetermine what training is needed for the employees to decrease the risk of another attack.Determine appropriate countermeasures to deal with common threats.Devise a maintenance plan for review security on a regular basis.

****PLEASE PAY SPECIAL ATTENTION TO THE WRITE SECTION** Scenario: A federal agency has asked your cybersecurity consulting firm to provide it with a white paper that discusses best practices for security architectures and designs for mobile apps. The white paper should also present the agency with a strategy for developing an award winning digital government mobile app for its submission to next years’ Mobi-Gov awards. The agency had several mobile apps in the “honorable mention” category this past year but, each of the apps failed to make passing scores in the mobile app security category. The contest rules do not allow revision and resubmission of entries from prior years. For this reason, your starting point should be recommendations for a security architecture for a completely new mobile app. The scoring for the awards is organized around the three strategies from the federal government’s digital government strategy (see https://www.whitehouse.gov/‌sites/‌default/‌files/‌omb/‌egov/‌digital-government/digital-government.html ). 1.  Enable the American people and an increasingly mobile workforce to access high-quality digital government information and services anywhere, anytime, on any device. 2.  Ensure that as the government adjusts to this new digital world, we seize the opportunity to procure and manage devices, applications, and data in smart, secure and affordable ways. 3.  Unlock the power of government data to spur innovation across our Nation and improve the quality of services for the American people. Research: 1.  Research the “best” of federal mobile apps to see examples of the type of apps the agency will be competing against next year. a.  19 of the Coolest Government Mobile Apps https://www.govloop.com/community/blog/cool-gov-mobile-apps/ b.  10 Most Entertaining Government Mobile Apps https://www.govloop.com/community/blog/10-most-entertaining-government-mobile-apps/ c.  3 Innovative Ways Agencies are Leveraging Mobile Apps http://fedscoop.com/great-government-mobile-apps 2.  Research the federal government’s perspective on mobile app security architectures and design recommendations. Here are three sources to help you get started: a.  Mobile App Developers: Start with Security https://www.ftc.gov/tips-advice/business-center/guidance/mobile-app-developers-start-security b.  Mobile Security Reference Architecture https://cio.gov/wp-content/uploads/downloads/2013/05/Mobile-Security-Reference-Architecture.pdf c.  Architecture and Design Considerations for Secure Software (Mobile Applications)https://buildsecurityin.us-cert.gov/sites/default/files/ArchitectureAndDesign_PocketGuide_v2%200_05182012_PostOnline.pdf 3.  Research industry recommendations for mobile app security. Begin with the following sources: a.  OWASP Mobile Security Project https://www.owasp.org/index.php/OWASP_Mobile_Security_Project b.  Top 10 Mobile Risks (click on tab) https://www.owasp.org/index.php/OWASP_Mobile_Security_Project c.  Mobile app security: Always keep the back door locked http://arstechnica.com/security/2013/02/mobile-app-security-always-keep-the-back-door-locked/ 4.  Find five or more best practice recommendations for ensuring the security of mobile apps. These recommendations must include security for the platform (mobile device), the data on the device, and the transmission path between the device and the mobile application server. Write: Write a five (5) to eight (8) page white paper in which you summarize your research and present your “best practices” based strategy for developing an award winning, secure mobile app. You should focus upon clarity and conciseness more than length when determining what content to include in your paper. At a minimum, your white paper must include the following: 1.  An overview that contains an abstract and introduction of mobile apps for digital government. Your overview should include examples of mobile apps which are recognized as being innovative and “best of category” for delivering government information and services to mobile devices. This overview should be suitable for an executive audience. 2.  A separate section in which you discuss the federal government’s requirements and recommendations for mobile app security architectures and the associated design recommendations. This section should be written for non-technical managers; you will need to translate from tech-speak to manager-speak. Diagrams and pictures may be useful but, remember to include the appropriate in-text citations for the source (append to the figure caption). 3.  A separate section in which you discuss industry’s recommendations for security architectures and risk reduction for mobile app security. 4.  A section in which you present 5 or more best practice recommendations for building security into the new mobile app which will become next year’s entry into the Mobi-Gov awards contest. These recommendations should be presented as your “strategy” for “winning” the security evaluation category for mobile apps.Additional Information 1.  Your white paper should use standard terms and definitions for cybersecurity concepts. The following sources are recommended: a.  NICCS Glossary http://niccs.us-cert.gov/glossary b.  Guidelines on Security and Privacy in Public Cloud Computing http://csrc.nist.gov/publications/nistpubs/800-144/SP800-144.pdf 2.  You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must comply with APA 6th edition Style requirements. 3.  Use APA 6th edition style (formatting) for the organization and appearance of the MS Word document that you submit to your assignment folder. This includes margins, section headings, and consistent use of fonts (Times New Roman 12 in black), paragraph styles (first line indent by ½ inch), and line spacing (double). Formatting requirements and examples are found under Course Resources > APA Resources. Your file should contain both a title page and a separate References page. Use page breaks to ensure that the title page and references page are separate from the body of the paper. 4.  You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. These items are graded under Professionalism and constitute 15% of the assignment grade.