Your Learning Team is a cybersecurity engineering team for a financial services company that sells investments to, and manages investment portfolios for, high net-worth individuals.
Your organization just completed the migration of the account managers to a cloud-based, customer relationship management (CRM) software application. Your organization has integrated the cloud-based CRM with on-site investing and account management systems to improve the sales of investment products to customers and potential customers and for managing customer accounts and investment portfolios. Account managers are excited to use the new system, especially since it supports mobile device access.
Management hopes the new cloud-based CRM, integrated with the on-site software applications that manage customer accounts and investment portfolios will help the organization to generate more leads, increase sales, improve customer service, reduce the cost of sales for the organization, and increase revenue.
The Chief Information Security Officer (CISO) of your organization is concerned about the security of this new system and its integration to existing systems and has requested that your team complete the following 1- to 2-page security analysis:
Create a plan that addresses the secure use of mobile devices by internal employees and external employees as they use mobile devices to access these applications.
Recommend physical security and environmental controls to protect the data center which runs the on-site applications

Would you like to be one of the early pioneers in voice driven computer aided engineering? Nowadays, natural language interaction comes built into a wide range of computing devices such as mobile phones, tablets and laptops. Typically usage is limited to searching for information on the internet or asking a virtual digital assistant to speed dial a specified contact. What might not be obvious is that this capability is rapidly evolving, not because of the cleverness or productivity of human programmers, but through machine learning. The introduction of natural language interaction to consumer devices that are connected to the internet means that potentially hundreds of millions of people interact with them. With artificial intelligence in the loop, the ability of software to interpret natural language is continually improving. In the future, we should expect this capability to be provided in engineering software packages such as Autocad, Abaqus or Ansys. This project involves investigating the capabilities of a number of open source toolkits for voice recognition and selecting one of them to use with ParaFEM, an open source package for finite element analysis developed at Manchester. The work will involve creating a prototype workflow on a Linux computer that takes very simple voice commands and converts them into computer commands to drive the engineering software. A good outcome from the project would be to allow a user to say “Run ParaFEM” to the computer and for the user to see the software running. Depending on the progress made, the implementation and level of user interaction could be more advanced such as using voice commands to change the value of simulation parameters. Focus on the libraries for voice recognition and how to turn voice commands into Python commands. Parafem can be downloaded freely.
Use a ParaFEM binary executable as a black box in windows.
So you do not need to understand the finite element method in detail. Focus on the libraries for voice recognition and how to turn voice commands into Python commands. Parafem can be downloaded freely. I have also attached a book, it may be help but tutor said it’s not concerned too much. Also, very Important, please note that you do not need to understand the finite element method in detail. Focus on the libraries for voice recognition and how to turn voice commands into Python commands.
attachmentprogramming_the_finite_element_method1.pdfattachment1_5.docxattachmentPlagiarisedPartsthewordsinRed.docxattachmentFormatoftheRepo

This week’s you have to answer 2 parts
1. Discuss the difference between a Continuity of Operations Plan (COOP), a Business Continuity Plan (BCP), and a Disaster Recovery Plan (DRP). You might want to start with the definitions from the NIST SP 800-34, located at http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf. Section 3.5 discusses the different types of Plan Testing, Training, and Exercises.
2. What would be your recommendation for training personnel on your BCP and DRP at the project organization?
It should be 500 words with APA format and references

The deliverables for this project are as follows:
Security Assessment Report (SAR): This should be an 8-10 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
Risk Assessment Report (RAR): This report should be a 5-6 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
In a Word document, share your lab experience and provide screen prints to demonstrate that you performed the lab.
follow the attached outline to complete assignment
include diagrams
______________________________________________________
Attached is OIG Audit Report. This OIG Audit Report and recommendations on the OPM Breach should help to develop Enterprise Level Security Plans.
Attached is a suggested outline and alternative templates for the Project 3 SAR and RAR. Again, these are just guidelines, you can adapt them anyway you like, as long as you address the questions/requirements for the project. I hope these help.
You are an Information Assurance Management Officer, IAMO, at an organization of your choosing. One morning, as you’re getting ready for work, you see an email from Karen, your manager. She asks you to come to her office as soon as you get in. When you arrive to your work, you head straight to Karen’s office. “Sorry for the impromptu meeting,” she says, “but we have a bit of an emergency. There’s been a security breach at the Office of Personnel Management.” We don’t know how this happened, but we need to make sure it doesn’t happen again, says Karen. You’ll be receiving an email with more information on the security breach. Use this info to assess the information system vulnerabilities of the Office of Personnel Management. At your desk, you open Karen’s email. She’s given you an OPM report from the Office of the Inspector General, or OIG. You have studied the OPM OIG report and found that the hackers were able to gain access through compromised credentials. The security breach could have been prevented, if the Office of Personnel Management, or OPM, had abided by previous auditing reports and security findings. In addition, access to the databases could have been prevented by implementing various encryption schemas and could have been identified after running regularly scheduled scans of the systems. Karen and the rest of the leadership team want you to compile your findings into a Security Assessment Report or SAR. You will also create a Risk Assessment Report, or RAR, in which you identify threats, vulnerabilities, risks, and likelihood of exploitation and suggested remediation.
The security posture of the information systems infrastructure of an organization should be regularly monitored and assessed (including software, hardware, firmware components, governance policies, and implementation of security controls). The monitoring and assessment of the infrastructure and its components, policies, and processes should also account for changes and new procurements that are sure to follow in order to stay in step with ever-changing information system technologies.
The data breach at the Office of Personnel Management (OPM) is one of the largest in US government history. It provides a series of lessons learned for other organizations in industry and the public sector. Some critical security practices, such as lack of diligence to security controls and management of changes to the information systems infrastructure were cited as contributors to the massive data breach in the OPM Office of the Inspector General’s (OIG) Final Audit Report, which can be found in open source searches. Some of the findings in the report include: weak authentication mechanisms; lack of a plan for life-cycle management of the information systems; lack of a configuration management and change management plan; lack of inventory of systems, servers, databases, and network devices; lack of mature vulnerability scanning tools; lack of valid authorizations for many systems, and lack of plans of action to remedy the findings of previous audits.
The breach ultimately resulted in removal of OPM’s top leadership. The impact of the breach on the livelihoods of millions of people is ongoing and may never be fully known. There is a critical need for security programs that can assess vulnerabilities and provide mitigations.
There are nine steps that will help you create your final deliverables. The deliverables for this project are as follows:
Security Assessment Report (SAR): This should be an 8-10 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
Risk Assessment Report (RAR): This report should be a 5-6 page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
In a Word document, share your lab experience and provide screen prints to demonstrate that you performed the lab.
For Lab
Select the following link to enter Workspace. and complete the lab activities related to network vulnerabilities.
You will now investigate network traffic, and the security of the network and information system infrastructure overall. Past network data has been logged and stored, as collected by a network analyzer tool such as Wireshark. Explore the tutorials and user guides to learn more about the tools you will use. Click the following link to read more about these network monitoring tools: Tools to Monitor and Analyze Network Activities.
You will perform a network analysis on the Wireshark files provided to you in Workspace and assess the network posture and any vulnerability or suspicious information you are able to obtain. Include this information in the SAR.
You will then return to the lab in order to identify any suspicious activities on the network, through port scanning and other techniques. You will revisit the lab and lab instructions in Step 7: Suspicious Activity.
Click here to access the Project 3 Workspace Exercise Instructions.
In order to validate the assets and devices on the organization’s network, run scans using security and vulnerability assessment analysis tools such as MBSA, OpenVAS, Nmap, or Nessus depending on the operating systems of your organization’s networks. Live network traffic can also be sampled and scanned using Wireshark on either the Linux or Windows systems. Wireshark allows you to inspect all OSI layers of traffic information. Further analyze the packet capture for network performance, behavior, and any suspicious source and destination addresses on the networks.
In the previously created Wireshark files, identify if any databases had been accessed. What are the IP addresses associated with that activity? Include this information in the SAR.
see the grading requirements in the excel document click project 3
attachment20180808031014project_3___sar_and_rar_outlines1.docxattachment20180808030956federal_information_security_modernization_act_audit_fy_2015_final_audit_report_4a_ci_00_15_01111.pdfattachmentCST610-DFC6