The operating system (OS) of an information system contains the software that executes the critical functions of the information system. The OS manages the computer's memory, processes, and all of its software and hardware. It allows different programs to run simultaneously and access the computer's memory, central processing unit, and storage.The OS coordinates all of these activities and ensures that sufficient resources are allocated. These are the fundamental processes of the information system, and if they are violated by a security breach or exploited vulnerability, that could have a significant impact on the organization.Security for operating systems means protecting the OS components from attacks that could cause deletion, modification, or destruction of the operating system. Threats to an OS could include a breach of confidential information, unauthorized modification of data, or unauthorized destruction of data.It is the job of the cybersecurity engineer to understand the operations and vulnerabilities of the OS (for any type of OS), and to provide mitigation, remediation, and defense against threats that would expose those vulnerabilities or attack the OS. As you assess your company’s systems, you will likely uncover gaps and errors. These may reveal mistakes that people at the company have made which might embarrass or anger those involved. However, the trust placed in you means that you have a responsibility to report your findings fully and accurately so that you can reduce or eliminate the risk of future unauthorized access. So be fair and follow industry standards, but have the courage to be a force for positive change in your company’s cybersecurity efforts.There are six steps that will help you create your final deliverables. The deliverables for this project are as follows:Security Assessment Report (SAR): This report should be a seven- to eight-page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.Nontechnical presentation: This is a set of eight to 10 PowerPoint slides for upper management that summarizes your thoughts regarding the findings in your SAR.In a Word document, share your lab experience and provide screenshots to demonstrate that you performed the lab.Step 1: Define the OS The audience for your security assessment report (SAR) is the leadership of your company, which is made up of technical and nontechnical staff. Some of your audience will be unfamiliar with operating systems. Therefore, you will begin your report with a brief explanation of OS fundamentals and the types of information systems.Click to read the following resources that provide information you need to know before writing a thorough and accurate OS explanation:operating systems fundamentalsinformation system architecturecloud computingweb architectureAfter reviewing those resources, begin drafting the OS overview to do the following:Explain the user's role in an OS.Explain the differences between kernel applications of the OS and the applications installed by an organization or user.Describe the embedded OS.Describe how the systems fit in the overall information system architecture, of which cloud computing is an emerging, distributed computing network architecture.Include a brief definition of operating systems and information systems in your SAR.Step 2: Review OS Vulnerabilities You just summarized operating systems and information systems for leadership. In your mind, you can already hear leadership saying, "So what?" The company's leaders are not well versed in operating systems or in the threats and vulnerabilities in them, so you decide to include in your SAR an explanation of advantages and disadvantages of the different operating systems and their known vulnerabilities.Prepare by first reviewing the different types of vulnerabilities and intrusions explained in these resources:Windows vulnerabilitiesLinux vulnerabilitiesMac OS vulnerabilitiesSQL PL/SQL, XML and other injectionsBased on what you gathered from the resources, compose the OS vulnerability section of the SAR. Be sure to:explain Windows vulnerabilities and Linux vulnerabilities;explain the Mac OS vulnerabilities, and vulnerabilities of mobile devices;explain the motives and methods for intrusion of the MS and Linux operating systems;explain the types of security awareness technologies, such as intrusion detection and intrusion prevention systems;describe how and why different corporate and government systems are targets; anddescribe different types of intrusions such as SQL PL/SQL, XML, and other injections.You will provide the company's leadership with a brief overview of these vulnerabilities in your SAR.Step 3: Prepare for the Vulnerability Scan You have just finished defining the vulnerabilities an OS can have. Soon, you will perform vulnerability scanning and vulnerability assessments on the security posture of your company's operating systems. But first, consider your plan of action. Read these two resources to be sure you fully grasp the purpose, goals, objectives, and execution of vulnerability assessments and security updates:vulnerability assessmentspatches Then provide the leadership with the following:A description of the methodology you propose to assess the vulnerabilities of the operating systems, including an explanation of how this methodology will determine the existence of those vulnerabilities in the your company's OSA description of the applicable tools to be used and any limitations of the tools and analyses, including an explanation of how your proposed applicable tools will determine the existence of those vulnerabilities in your company's OSThe projected findings from using these vulnerability assessment toolsIn your report, discuss the strength of passwords, any Internet Information Services' administrative vulnerabilities, SQL server administrative vulnerabilities, and other security updates and management of patches, as they relate to OS vulnerabilities.Step 4: Review Vulnerability Assessment Tools for OS and Applications Vulnerability assessment is scanning a network for known security weaknesses. Vulnerability scanners are software tools designed to provide an automated method for conducting vulnerability scans across an entire network that may run into hundreds or even thousands of machines. According to EC-Council (2018), vulnerability scanners can help identify the following types of weaknesses: The OS version running on computers or devices IP and Transmission Control Protocol/User Datagram Protocol (TCP/UDP) ports that are listening Applications installed on computers Accounts with weak passwords Files and folders with weak permissions Default services and applications that might have to be uninstalled Mistakes in the security configuration of common applications Computers exposed to known or publicly reported vulnerabilities Additionally, vulnerability scanners can be used to help predict the effectiveness of countermeasures (security controls) and to test the effectiveness of those controls in the production network. Further, vulnerability scanners also have limitations, primarily in that they are only as effective as the supporting databases and/or plugins at a point in time. Large, automated vulnerability scanning suites also require maintenance, tuning, and frequent updates to be able to detect new vulnerabilities in use in the wild. Finally, scanning engines are prone to both false positives and negatives. That is where you as the cybersecurity professional will apply your deep knowledge of the environment, network, and applications in use.Two common vulnerability scanners used in industry are the free Open Source scanner OpenVAS, and the commercial tool, Nessus. In this lab, you will use OpenVAS. Select the following links to learn more about OpenVAS and computer networks:OpenVAScomputer networksYour leadership will want to understand the capabilities of the OpenVAS scanner, so you will need to include that information in your Security Assessment Report (SAR). Use the tool’s built-in checks to complete the lab. For details on accessing the lab, see the "Complete This Lab" box below. Use OpenVAS to complete the following:For the Windows OS: Determine if Windows administrative vulnerabilities are present.Determine if weak passwords are being used on Windows accounts.Report which security updates are required on each individual system.The tool provides a dynamic assessment of missing security updates. Scan one or more computers by domain, IP address range, or other groupings.Once complete, provide a detailed report and recommendations on how to make your system a more secure working environment. In this case, the OpenVAS tool will create and store individual XML security reports for each computer scanned and will display the reports in the graphical user interface in HTML.For the Linux OS: Determine if Linux vulnerabilities are present.Determine if weak passwords are being used on Linux systems.Determine which security updates are required for the Linux systems.The tool provides a dynamic assessment of missing security updates. Scan one or more computers by domain, IP address range, or other groupings.Once complete, provide a detailed report and recommendations on how to make your system a more secure working environment.Knowledge acquired from this Workspace exercise will help your company's client organizations secure the computer networks' resources and protect corporate data from being stolen.Validate and record the benefits of using these types of tools. You will include this in the SAR.Step 5: Create the Security Assessment Report By using the OpenVAS security vulnerability assessment tool from the previous step, you now have a better understanding of your system's security status. Use the results you obtained to create the Security Assessment Report (SAR) as part of your deliverables. In your report to the leadership, make sure to emphasize the benefits of using the security tool, and provide recommendations based on your findings.Remember to include analyses and conclusions in the SAR deliverable as follows:After you provide a description of the methodology you used to make your security assessment, provide the actual data from the tools, the status of security and patch updates, security recommendations, and specific remediation guidance for your senior leadership.Include any risk assessments associated with the security recommendations, and propose ways to address the risk either by accepting it, transferring it, mitigating it, or eliminating it.Include your SAR in your final deliverable to leadership.Step 6: Develop the Presentation Based on what you have learned in the previous steps and your SAR, you will also develop a presentation for your company's leadership.Your upper-level management team is not interested in the technical report you generated from your Workspace exercise. Team members are more interested in the bottom line. You must help these non­technical leaders understand the very technical vulnerabilities you have discovered. They need to clearly see what actions they must either take or approve. The following are a few questions to consider when creating your non­technical presentation:How do you present your technical findings succinctly to a non­technical audience? Your Workspace exercise report will span many pages, but you will probably not have more than 30 minutes for your presentation and follow-up discussion.How do you describe the most serious risks factually but without sounding too dramatic? No one likes to hear that the entire network has been hacked, data has been stolen, and the attackers have won. You will need to describe the seriousness of your findings while also assuring upper-level management that these are not uncommon occurrences today.How do your Workspace exercise results affect business operations? Make sure you are presenting these very technical results in business terms that upper-level management will understand.Be clear about what action you are recommending. Upper-level managers will want to understand not only what you discovered, but also what you propose as a solution. They will want to know what decisions they need to make based on your findings.Your goal for the presentation is to convince the leadership that the company needs to adopt at least one security vulnerability assessment tool to provide an extra layer of security.The deliverables for this project are as follows:Security Assessment Report (SAR): This report should be a seven- to eight-page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.Nontechnical presentation: This is a set of eight to 10 PowerPoint slides for upper management that summarizes your thoughts regarding the findings in your SAR.Lab: In a Word document, share your lab experience and provide screen prints to demonstrate that you performed the lab.

Please include the link to your VM in your lesson report.Watch the videos and create/experiment with the different tags (p, br, div, lists, title, etc). You must submit a lesson report using the template provided in week 2. Your report should demonstrate that you are able to use all the tags in the videos. Your VM must have all the work from the lesson included to receive full credit.

Type: Individual Project Unit: Implementing Data Governance Due Date: Wed,9/23/20 Grading Type: Numeric Points Possible: 250 Points Earned: Points Earned not available Deliverable Length: 4–5 pages of new content; 25–30 total pages View objectives for this assignment Go To:Assignment DetailsScenario Learning MaterialsReading Assignment My Work: Online Deliverables: Submissions Looking for tutoring? Go to Smarthinking Details Scenario Learn Read My Work Online Deliverables: Submissions Assignment DetailsAssignment DescriptionCase Study: Problem 5The case study company received the latest report from the enterprise content management (ECM) consultant on existing data governance within the company. Sadly, the report was not very long because there is not very much data governance within the organization. On the positive side, the slate is relatively clean, and the consultant is free to establish a sound set of data governance policies and procedures for the future. As a final phase of the project, the ECM consultant will establish new and improved data governance policies and procedures in the areas of data quality, data management, data policies, business process management, and risk management. What factors will be important in good data governance, and what should a good data governance plan include? Key AssignmentPart 1: Enterprise Content Management and Data Governance Policies and Procedures Manual (4–5 new pages; 25–30 total pages)In the last few weeks, you have prepared the foundation for the enterprise content management manual by writing the Project Outline and Content Requirements, Implementation Life Cycle, Information Infrastructure Evaluation, Information Infrastructure Improvements, and Data Governance Evaluation sections. The final step in developing the enterprise content management manual is to document the changes that are necessary to improve the governance in the areas of data quality, data management, data policies, business process management, and risk management. In addition, you will prepare an implementation plan for the ECM and data governance policies and procedures you have defined. You will also further refine the document to produce the final version for the project. Updates may be based on peer and instructor feedback.The following are the project deliverables:Update the Enterprise Content Management and Data Governance Policies and Procedures Manual title page with a new date and project name. Update the previously completed sections based on instructor feedback. Data Governance Improvements Data Quality Document the changes that are necessary to improve the governance currently in place related to data quality in the organization. Data Management Document the changes that are necessary to improve the governance currently in place related to data management in the organization. Data Policies Management Document the changes that are necessary to improve the governance currently in place related to data policies in the organization. Business Processes Document the changes that are necessary to improve the governance currently in place related to business processes in the organization. Risk Management Document the changes that are necessary to improve the governance currently in place related to risk management in the organization. Implementation Plan Define the team required for implementation of the ECM and data governance policies and procedures. Identify the key tasks required for implementation, including time and resource requirements. Assign key tasks to implementation team members. Develop a project time line. Establish key implementation milestones. Complete the Enterprise Content Management and Data Governance Policies and Procedures Manual final version, by doing the following: Review the entire document for any changes and improvements you would like to make. Ensure that this final version of the document is sufficiently detailed to meet the requirements of the assignment. Any previous instructor feedback should be addressed with appropriate changes. Be sure to update your table of contents before submission. Name the document "yourname_IT621_IP5.docx." Worked ExamplePlease refer to the Worked Example below for an example of this assignment based on the Problem-Based Learning Scenario. The worked example is not intended to be a complete example of the assignment but will illustrate the basic concepts required for completion of the assignment and can be used as a general guideline for your own project. Your assignment submission should be more detailed and specific and should reflect your own approach to the assignment rather than just following the same outline provided in the worked example.Note that the worked example includes material from previous worked examples. The new material will be found under the Week 5 sections of the Table of Contents. The worked example is provided here to help with this assignment.Part 2: Argumentation PowerPoint (5 slide, excluding Title and References slides)Envision that you now have to present your solution to your client. You need to make a formal presentation to a group of stakeholders, and you need to be prepared to answer their questions. As a final step in the project, you will create a PowerPoint presentation in which you provide the following:In the Notes pages of each slide and based on the context of the information on that slide, provide a narrative of 2–3 paragraphs of your rationale for the data governance improvements that you are recommending. On each slide, identify the evidence that you have to support the argument(s). All sources used to support your argument and solution should be cited both in-text (on slide or in Notes section) and on a References slide in APA format. Name the document "yourname_IT621_IP5.pptx." Please submit your assignment.For assistance with your assignment, please use your text, Web resources, and all course materials.Reading AssignmentAssignment ObjectivesDevelop data governance policies and procedures for an organization.Other Information There is no additional information to display at this time. LegendExtra Credit View Assignment Rubric