Read NIST SP 800-30 revision 1 (http://csrc.nist.gov/publications/nistpubs/800-30-rev1/sp800_30_r1.pdf (Links to an external site.)), NIST SP 800-53 revision 4, Chapters 1 thru 3 (http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf (Links to an external site.)), and NIST SP 800-18 revision 1 (http://csrc.nist.gov/publications/nistpubs/800-18-Rev1/sp800-18-Rev1-final.pdf (Links to an external site.)), all of which are located in your Module 3 Resources folder.Develop a System Security Plan (SSP) based on the information system selected in Project 1 using the sample provided in NIST SP 800-18 revision 1, Appendix A, for general formatting of your deliverable. Note for #13, Minimum Security Controls in the SSP template: you only need to specify the appropriate control baseline from NIST SP 800-53 revision 4 and any additional controls or control enhancements (MINIMUM OF 2) added as part of the tailoring process, including your rationale for the addition. Do NOT list all the controls and enhancements in the selected baseline.Note:- Need PPT Also

ReadA proverb provides that, "beauty is in the eye of the beholder." This statement applies equally to the law. When viewing legislation or agreements, the viewpoint or filter through which one "sees" the law greatly affects how it is viewed. The following articles are an example of just such an instance. Is one viewpoint "right" and the other "wrong"? The judicial branch is to be an unbiased arbiter of justice, applying the law without regard to politics or personal viewpoints. Is this truly possible?"World's Worst Internet Law" Ratified by SenateLinks to an external site. Senate Ratification of Cybercrime Treaty PraisedLinks to an external site.WriteAfter reading the two articles provided, relate your thoughts as to how opinions differ within the Legislative branch regarding a law (national or international), and to differing opinions in different branches. Why do such differing opinions occur regarding the same law?How do you think this could and does affect negotiations for and interpretation of laws and agreements? SubmitUse current APA Style formatting for your written assignment, citations, and references. Write a minimum of 500 words. As this is a short paper, do not use or add a title page and abstract.Save your assignment using a naming convention that includes your first and last name and the activity number (or description). Do not add punctuation or special characters. Refer to the Reflective Response Rubric for detailed grading criteria.Note: This assignment will automatically be checked through Turnitin,Links to an external site. a service that checks your work for improper citation or potential plagiarism by comparing it against a database of web pages, student papers, and articles from academic books and publications.Please read these instructions for information on accessing the rubric for assignments that have Turnitin enabled. (Links to an external site.)Links to an external site.

Cybersecurity is all about managing risk. Risk cannot be totally eliminated in most cases but you need to understand your internal environment and the various threats against it. Then you need to take the necessary steps to mitigate or control them based on the risk appetite of the company. In the class session and with the learning activities you have learned a great deal about Risk Management, Risk Analysis, Risk Identification, and Risk Controls (NIST documents). This is an opportunity for you as the CISO to practice your Risk Management skills. This is a “hands-on” experiential learning experience. In this assignment, you will be identifying and describing assets, vulnerabilities and mitigation strategies. Select (5) information assets from your company inventory that you feel are important to the success of your company. Provide a high level description of each information asset and then briefly explain why each of these information assets is important. An information asset can be just about anything that is important to your company such as: Hardware: ex. Your company’s web server Software: ex. A new mobile app Company Information: ex. Your product’s secret recipe Customer Data: ex. Customer’s credit card numbers, PII, others For each of the (5) identified assets, determine its appropriate classification category and corresponding value to the profitability of the company. You must also include an explanation of your classification scheme and how you are determining the profit value so your audience understands your reasoning. Use visual elements to display your information. A portion of your grade will be based on how you communicate your information. For each Asset, select (1) vulnerability that you believe is most worrisome for that particular Asset. Provide a high level description of the vulnerability and then briefly explain why you chose it. You should have a total of (5) vulnerabilities when this part of the analysis is complete: 1 vulnerability per asset. For each of the (5) identified vulnerabilities, determine their corresponding probability and impact consequence. You decide how to represent the probability and impact consequence but you must also include an explanation of your decision process so your audience understands your reasoning. Use visual elements to display your information. You can use a numerical score, a color scheme or even High/Medium/Low type system. A portion of your grade will be based on how you communicate your information. 1 Finally, determine the appropriate risk mitigation strategy and the appropriate security controls for each of the (5) identified vulnerabilities. You must also include an explanation of your controls and why they are the best choice for the particular vulnerability. Most risks will require more than a single control to mitigate them. Your 5 assets, 5 vulnerabilities, 5+ controls (recommendations) should be listed in a table. Remember CIA and data classification are important. Additionally, likelihood of occurrence is a good way to highlight critical and high risk items in an effort to prioritize and focus the executives attention and budget priorities. Once your tables(s) are created they are also a good way to summarize your risk report and ask for their permission to move forward with the recommended plans. Your assignment should be in a “Word” document (not .pdf) format to allow me to provide feedback within the document. Upload your Risk Project in the word file in the Risk information assignment box. Please be sure to name the word file document using the following naming convention to make it easier for everyone to manage: <lastname_Risk> (ex: Blanke_Risk) Grading Metrics – Risk Report 100 points The Asset portion of this assignment will be worth (30 pts)The Vulnerability portion of this assignment will be worth (30 pts)The Mitigation portion of this assignment will be worth (20 pts)Keep in mind that how well you visually represent all this information in an easy to understand format will be part of the grading criteria. You will not receive full credit if all you use is text to complete this assignmentProvide a Reference List and use APA formatting within your report. I should see that you are using at least 10 references for your report and your book plus a specific part of the lecture should be one of those references (20 pts) Grading Metrics – Risk Presentation – 50 points Prepare 3-5 .ppt slides (30 points)These should be professionally developed (10 points)Each slide should have notes of what you are saying to the Executives (10) 2