\ Required Assigned Topic for the focus of your paper. • Stress Management Note: You will use the same scenario you developed and same mHealth app you identified in Week 2. Requirements and Guidelines Download the required Milestone 2 Template. (Links to an external site.) Save it to your computer with the file name: Your Last Name NR361 Milestone 2.docx. Briefly state the patient scenario from the Milestone 1 assignment. Include revisions, if required by Milestone 1 faculty feedback. Identify (3) teaching areas to improve patient outcomes. Information to be taught to patient should include information about the mHealth app, safety, guidelines, and how to interpret and act on the information that is provided. Describe 3 ways you would determine and evaluate the success of the patient’s use of the mHealth app.

Risk Management After completing your master's degree, you have been hired by a  contracting company as an information systems security officer, or ISSO,  supporting systems for federal clients. One morning, your boss asks you  to come to her office. She tells you that you'll be working on a  network security audit. Network security audits, based on FISMA  standards, are used annually to determine the effectiveness of our  security controls. The boss explains: "Prior to the security audit, I  will need you to test, execute, collect, and compile your results into a  security assessment report, or SAR. Once you're finished, you will  submit the report to me and the executive leadership." Later, you receive a follow-up email from your boss with  instructions. First you will conduct a risk and threat assessment of the  enterprise network. Next, you will perform black box testing of the  network using network analysis tools. After identifying any network  vulnerabilities, you will lead efforts to remedy and mitigate those  vulnerabilities using appropriate risk management controls. You will  then perform a white box test, and compile the results in the final  security assessment report. And provide this to leadership, along with  an executive briefing in your lab analysis, so management has a baseline  view of the security posture of the enterprise network, before the  actual external IT audit. The email ends with this note: "Thank you for  taking this on. Our executive leadership is excited to learn of your  findings." Security Assessment Report (12 pages)  Conduct a Security Analysis Baseline (3 of 12 ages)  Security requirements and goals for the preliminary security baseline activity.  Typical  attacks to enterprise networks and their descriptions. Include Trojans,  viruses, worms, denial of service, session hijacking, and social  engineering.  Include the impacts these attacks have on an organization.  Network infrastructure and diagram, including configuration and connections Describe the security posture with respect to LAN, MAN, WAN, enterprise.  Network infrastructure and diagram, including configuration and connections and endpoints.  What are the security risks and concerns?  What are ways to get real-time understanding of the security posture at any time?  How regularly should the security of the enterprise network be tested, and what type of tests should be used?  What are the processes in play, or to be established to respond to an incident?  Does the security workforce have the requisite technical skills and command of the necessary toolsets to do the job required?  Is there an adequate professional development roadmap in place to maintain and/or improve the skill set as needed?  Describe the ways to detect these malicious code and what tactics bad actors use for evading detection.  In the network diagram: includethe delineation of open and closed networks, where they co-exist.  In the open network and closed network portion, show the connections to the Internet  Physical  hardware components. Include routers and switches. What security  weaknesses or vulnerabilities are within these devices?  Discuss operating systems, servers, network management systems.data in transit vulnerabilities endpoint access vulnerabilities external storage vulnerabilities virtual private network vulnerabilities media access control vulnerabilities ethernet vulnerabilities  Possible applications. Current and future mobile applications and possible future Bring Your Own Device policy. Include: remediation mitigation countermeasure recovery  Provide the methods used to provide the protections and defenses.  From  the identification of risk factors in the risk model, identify the  appropriate security controls from NIST SP 800-53A and determine their  applicability to the risks identified.  Determine a Network Defense Strategy 2/12 pages  Outline how you would test violations. Identify  how you will assess the effectiveness of these controls and write test  procedures that could be used to test for effectiveness. Write  them in a manner to allow a future information systems security officer  to use them in preparing for an IT security audit or IT certification  and accreditation.  Explain the different testing types (black box testing, white box testing).  Plan the Penetration Testing Engagement 2/12 pages  Include all involved processes, people, and timeframe. Develop a letter of intent to the organization, and within the letter, include some formal rules of engagement (ROE)  Conduct a Network Penetration Test 4/12 pages  After  finding the security issues within the network, define which control  families from the NIST 800-53 are violated by these issues. Explain in the SAR why each is a violation, support your arguments with a copy of your evidence  Provide suggestions on improving the security posture of these violations.  Complete a Risk Management Cost Benefit Analysis 1/12 page  Complete  your SAR with a risk management cost benefit analysis. Think about the  cost of violations and other areas if you do not add the controls. Then  add in the cost for implementing your controls.