Respond to each question below. Remember to cover all aspects of the question. 

1. Successful security architecture needs upper management to support effective security standards and protocols. However, there are possible disadvantages to upper management involvement. List and describe the tradeoffs in the business between rigorous security and delivering products to customers. Go beyond merely the automated solutions or the technical checks that can be done without much human support.

2. Examine how capturing, standardizing, applying patterns, and standard solutions help to increase efficiency and maintain delivery teams’ velocity. Provide at least 3 real-world examples which describe and examine how they provide the velocity. Do not simply provide a list of things teams can do but for each idea, define the idea and explain its relevance. 

3. Schoenfield lists several components of a successful security architecture practice, such as broad support across the organization, recruitment, and training of security architects with the right kind of aptitude and interest, effective security requirements that enhance but do not slow down the innovation process, and finally, indicators that the security architecture team is being well utilized and adding value to project development. Describe what each of these components is and explain how each is relevant to security development. Include detail and examples.

TextBook: Schoenfield, Brook S.E. – Securing Systems: Applied Security Architecture and Threat Models, CRC Press, 2014 ISBN: 978-1-4822-3397-1

The Top questions should be covered from the concept of the below 13 chapters of Security Architecture and Design:  

Chapter 1: Introduction

Chapter 2: The Art of Security Assessment

Chapter 3: Security Architecture of Systems

Chapter 4: Information Security Risk

Chapter 5: Prepare for Assessment

Chapter 6: eCommerce Website

Chapter 7: Enterprise Architecture

Chapter 8: Business Analytics

Chapter 9: Endpoint Anti-malware

Chapter 10: Mobile Security Software with Cloud Management

Chapter 11: Cloud Software as a Service (SaaS)

        Chapter 12: Patterns and Governance Deliver Economies of Scale

Chapter 13: Building an Assessment Program

Discussion topics

Prepare two slides each with presenting note too

1. Discuss the limitations of memory management schemes in early systems. What were the most problematic aspects of these schemes?      Why were they sufficient for the first three generations of computers?
2. Discuss the compaction process. How often should it occur and what are its advantages and disadvantages?

Projects 2

Two page paper for each question  

1. Submit a report that discusses the differences between the next-fit and worst-fit algorithms.

2. List the steps involved in program relocation, including loop sequences, decision sequences, branching sequences, and data references. 

Additional Resources

1. Beginner’s      Guide to Memory Management:

http://www.memorymanagement.org/mmref/begin.html

1. Windows      Memory Management: https://msdn.microsoft.com/en-us/library/aa366779(VS.85).aspx
2. IBM:      Inside Memory Management:

http://www.ibm.com/developerworks/linux/library/l-memory/

5. Ravenbrook – The Memory Management Reference:

http://www.memorymanagement.org/

halloooooooooooooo, you good?

Write a 4–6 page paper addressing the following:

• Define the following four levels of testing for software development: 1) unit testing, 2) integration testing, 3) systems testing, and acceptance testing.
• Explain the purpose of each testing level, and provide your reasoning for why it is important that each level of testing is performed for any software development project.
• Describe how the four testing levels are related to one another.
• Additionally, conclude your paper by addressing the following ethical dilemma providing your perspective on how to approach this decision:

There is a “first to market at all costs” culture that exists at some well-known corporations today. They would rather send out a “buggy” product if it meant being first. There have been many inferior products to rise to the top simply because they took the biggest chunk of the market share before anyone else. If you worked for a major software corporation as a software developer and were assigned a role on a project, what would you do if your manager pushed to rush a product to market without sufficient debugging and testing. What are the ethical implications of delivering a quality product versus meeting a deadline? How would you approach this decision?

Be sure to cite your sources in this paper and use correct APA format.

Assignment Requirements

This paper should be a Microsoft Word (minimum 4-6 pages) document including the title and reference pages.

Respond to the questions in a thorough manner, providing specific examples of concepts, topics, definitions, and other elements asked for in the questions. Your paper should be highly organized, logical, and focused.

Your paper must be written in Standard English and demonstrate exceptional content, organization, style, and grammar and mechanics.

Your paper should provide a clearly established and sustained viewpoint and purpose.

Your writing should be well ordered, logical and unified, as well as original and insightful.

A separate page at the end of your research paper should contain a list of references, in APA format. Use your textbook, the Library, and the internet for research.

EXAM REQUIREMENTS

• Submit your answers as a single Word or PDF file, called “ISM 6316 Mid Term – <your name>”.

• Follow APA Style (double-spaced, 12-point font, 1-inch margins).

• This is an individual assignment. It is not a collaborative effort, not a team effort. You are not

allowed to discuss this exam with anyone, classmates or others. If you have any questions or

doubts, contact me by email.

• Submit your answers by the deadline. Each 24 hour period that you miss the deadline, it costs

10 points.

Question 1. (40 points; max 2 pages)

Transitioning an organization from running development projects with the Waterfall approach to

Agile/SCRUM is not an easy undertaking. Reflect on what you think are the biggest challenges that

have to be overcome and how you would approach this transition.

a. Describe four different challenges that organizations face when they want to transition to

SCRUM. For each challenge explain what the challenge is and why this is a critical challenge in

your opinion.

b. Describe for each challenge that you identified above what strategies you would use to

overcome the challenge.

Question 2. (30 points; max 2 pages)

SCRUM was originally intended as a project management approach for software development

projects. However, one may argue that SCRUM can be used as a generic project management

approach that can be applied in the context of any type of project, covering different focus areas

in a company (e.g. marketing, finance, or HR). Reflect on this position. To what extent do you

agree that SCRUM can be used as a generic project management approach? To what extent do you

disagree? Where lay the limits of the applicability of SCRUM to the management of complex

projects?

Question 3. (30 points; max 3 pages)

Visit: https://michaelochurch.wordpress.com/2015/06/06/why-agile-and-especially-scrum-are-terrible/

(A pdf of the blog will be available on CANVAS as well).

As you can tell, not everyone is convinced about the value of SCRUM. Critically reflect on the

opinions presented in the blog. (Please note that you do not have to read/consider the hundreds of

responses to this blog).

a. To what extent do you agree with the author’s point of view? On what issues do you disagree?

b. Based on your experience/understanding of SCRUM, what kinds of adjustments to SCRUM and its

practices or what other initiatives would you explore to address some of the issues that the

author raises?