It is important for students to understand how their curriculum is applied to real world workplace environments. How what you are studying can or will benefit you in your current, or future, career. For this assignment, you will need to review your program’s curriculum and goals and compare that to your current job/internship (if unemployed, reflect on a job/career that you desire to obtain in the future). To complete the assignment, please follow the below instructions:

Courses: 

 1. Comp Crimes & Digital Forensic.

 2. Digital Forensics Tools & Tech.

1. Review your program’s goals and curriculum on the UC Webpage and the UC Graduate Course Catalog:

• Webpage Links found here: https://www.ucumberlands.edu/academics/graduate#programs
• Graduate Catalog: https://www.ucumberlands.edu/academics/academic-catalog

1. Reflect on (research, if needed) your current (or future) job duties and responsibilities.

Assignment Details:Part 1 – Identify a Problem

• Problem solving starts by being able to identify existing problems, gaps in service, inefficient systems/processes, flawed policies, or any other areas of our job/career where improvement is needed. Identify a problem or gap at your workplace and explain why/how this problem exists.

Part 2 – Solve the Problem

• Use your knowledge that you’ve learned in the program (or hope to learn in a future course) to implement a plan to solve the problem.

Grading Expectations:

•  Fully answer both parts of the assignment.
• Word requirement: 400-500 words

*Please include job details (job title and employer, if available). 

Phase 4 – Implementation

This phase lays out the full implementation plan for your project. This includes the project schedule with the individual project tasks and timelines. For example, if you are recommending a network upgrade solution, this phase provides the expected timeline for things like building wiring, acquisition of networking hardware, programming of switches and routers, setup of firewalls, connection of WiFi access points, etc. It will include any training required for use or administration. If you are doing a program or web design solution, your implementation plan would include the breakdown of different program components, perhaps following the Agile or another methodology, as well as examples of code or web page framework. 

Note: This phase should be 2 pages in length. 

Phase 5 – Ongoing Maintenance and Recommendations

This phase discusses the ongoing maintenance of the newly implemented project solution and how it will be supported going forward. This may include any training of technical support staff, disaster recovery plans, facilities management, software updates, etc. If there are any additional recommendations for future work to be performed after the completion of this project,  address those recommendations here. For example, if you have proposed a network upgrade, then following the completion of this project, you may also want to recommend a full WiFi implementation as the next project. If you chose to write a program or web development solution, you might include how software updates, patches or fixing will be done, how future releases may be provided, or how the web site may be managed and updated for relevancy. 

Note: This phase should be 2 pages in length. 

Also added the past phases of assignments for references

Exercise 1:  If an organization has three information assets to evaluate for risk management purposes, as shown in the list below, which vulnerability should be evaluated for additional controls first? Which vulnerability should be evaluated last?

• A CRM-Server that is connected to the Internet. It has two vulnerabilities:
  • susceptibility to hardware failure, with a likelihood of 8, and
  • susceptibility to ransomware attack with a likelihood of 4.

The CRM-Server has been assigned an impact value of 10.  Assume that there are no current controls in place to protect it, and there is a 75 percent certainty of the assumptions and data.

• An E-commerce server hosts the company Web site and supports customer transactions. It runs a server software that is vulnerable to a buffer overflow attack, with the likelihood of such an attack estimated at 6. The server has been assigned an impact value of 8. Assume that there are no current controls in place to protect the server, and there is a 70 percent certainty of the assumptions and data.
• A Control-Console to monitor operations in the server room. It has no passwords and is susceptible to unlogged misuse by the operators. Estimates show that the likelihood of misuse is 2. There are no controls in place on this asset, which has an impact value of 5. There is a 90 percent certainty of the assumptions and data.

Exercise 2:  Using the list of threats to InfoSec presented in Chapter 6 identify and describe three instances of each that were not mentioned in the chapter.

Please follow instruction as mentioned in attach doc and work on that.