Written recommendations based on the results of an incident response investigation need to be developed to support the organization’s security assessment and training efforts. In Project 3 Step 10, you wrote and submitted a Situation Report which addressed the computer security incident investigation. Now, your team needs to further develop your recommended “next steps” from that deliverable (item 10 in SITREP 3). Your deliverable for this step will be to write a report on malware, encryption, ransomware, and communications and network security to inform the CISO and CISO staff about the next steps that should be taken. Your deliverable will be an assessment that consists of explanatory material to aid organizational leadership in understanding malware and system infections, and the investigative report that summarizes findings from the SITREP to substantiate whether a specific incident qualifies as ransomware. The report documents what is known about the Reveton malware and should provide concrete steps for protecting the organization and its computer systems from future attacks. Refer to the CISO Deliverable Overview for a full list of requirements for the intelligence debriefing.  POST  Please see below.SITREP 3 Situation Report on Computer Security IncidentThe situation to dateThe team found a possible security violation. List of passwords taped on the laptop visible when opened were found. Written down passwords can get stolen easily or seen by others hence posing a risk to personal data or the entire organization’s network (Hamid et, al, 2020). Laptop assigned to Penelope Anne was found alongside four USB storage devices scattered on the mouse pad in an open space which is against security policy that devices should be kept safe in order to protect confidential data and prevent them from physical damage. A resignation letter informing Human Resource of possible ransomware infection, extortionists, and threats was found in one of the USB partitions suspected to have been written by Penelope Anne.What was said in the letter of resignation?The letter was not addressed to anyone specifically and the resignation was effective immediately. Penelope Anne claimed that she had gone to the managers to report about being threatened by extortionists to infect the company’s IT systems with ransomware but no one took it seriously. She was told not to notify the FBI or the Internet Crime Centre but to deal with it since she was an IT expert. Her family too was threatened. The password for encrypted files was found in the letter. Penelope Anne was not the only one using the laptop found taped with passwords at the cubicle. So there is no proof that the resignation letter represented the true intentions of Penelope Anne. There is a possibility that someone else could have written the letter.Several staff have commented that the USB devices found in Ms. Grascholtz's work area are of the same type and brand as the USB found inside the server cabinet. Is this significant? Why or why not?The owner of the of the four USBs found scattered in Penelope Anne’s work area, maybe the same person the infected the systems hence it was very significant.What is the significance of the list of passwords found taped to the laptop?One of the passwords Fast246 taped on the laptop was for the opening of the resignation letter. The other two were for the encrypted file.What is the significance of a multi-partition USB storage device?Since Windows 10 does not allow removal storage media partitioning, multipartioning USB data is used to hide data on a USB drive.What conclusions can be drawn from your analysis of the browsing history?Based on Penelope’s browsing history it is possible that there was some truth in her resignation letter. Penelope searched the Reveton ransomware, how to deal with blackmail, coronavirus guidelines, Internet Crime Center complaint page, new internet scam news, and the FBI’s page.Is there sufficient evidence to show a link between the Reveton malware and Ms. Grascholtz?Resignation letter that mentions threats by extortionists to infect IT systems with ransomware, the recovered USB device containing the said resignation letter and the browser history about ransomware and Reveton is the evidence that links Penelope Anne and Reveton malware.Is there evidence supporting the supposition that an insider other than Ms.Grascholtz may have been responsible for the Reveton malware's entry onto the organization's networks?The laptop was confirmed to be used by several users hence evidence supporting that an insider other than Penelope Anne is responsible for the malware. It is suspected that the missing web developer could be responsible for the loss of configuration and control and the updated files.What other conclusions can be drawn from the information you have at hand?The missing web developer was aware of Penelope Anne’s claims about threats from extortionists. The web server could be tempered by the missing web developer.What are the next steps that the CISO and staff should take to further this investigation into the Reveton malware?All systems should be monitored and systems hardened to prevent attacks. Network scans should be performed to determine any malware present on the system. Further investigations should be conducted. The web developer and Penelope Anne should be located as they could be having information about the malicious actor behind the attack.

Every day, we are bombarded with statistics. Turn on a radio, television, or your computer and within five minutes of hearing or viewing a news story, you will be given some statistics about probability. It might be a story about health and the fact that 39,600 women will die from breast cancer in 2013, or that 35.8% of males between the ages of 65 and 74 will be diagnosed with prostate cancer. The news may be more uplifting, such as a certain technology product received a 94% approval rating, or that 56% of this year’s college graduates found jobs in their area of study within six months of graduation. The fact is that numbers are very much a part of our lives. They convey all sorts of things, such as frequency, odds, probability, and a host of other variables that help us decide. Every time you click on your Facebook account, numbers in the background are recording where you go and what you see so that the aggregate of your experiences can be quantified. Why? So decision-makers can make more informed decisions about whatever it is they are exploring. Assignment: Explore any statistics you want. Using the Internet as your primary medium for collecting information, gather statistics about one of your favorite activities. It may be your social media account; it may be your favorite diet program; it may be your interest in demographics; it may even be your interest in your family tree; or how many other people watch your favorite television show. Once you have gathered the statistics, identify the stakeholders, their possible interest in the statistics, and at least three key decisions they must make from the data. Defend your position with a rational explanation. The purpose of this assignment is to get you to think about the role that gathering numbers plays in our decision-making rationales and whether it is the “little stuff” or the “big stuff” in our lives. The paper must be in APA format and include a cover page, abstract, discussion, conclusion, and references. Your paper should go beyond the obvious, be written at a graduate level, and must be at least 1,700 words in length. You must use at least three resources to support your position. Remember, all resources including, but not limited to, journals, magazines, and/or books must be properly cited using APA style. Reference Broder, J. F., & Tucker, E. (2012). Risk analysis and the security survey (4th ed.). Waltham, MA: Butterworth-Heinemann.