Walden University Authority Structure & Information System Security Case Study

Description

Scenario

You have been hired as a security consultant for DIY Home & Yard, a nationwide hardware and building supplies chain with 250 stores across the continental U.S.

Recently, the company invested in an integrated business information system that links sales, inventory, and supply-chain management. In addition, customers can now browse the product catalogue online and fill virtual shopping carts with items to pick up at one of the local stores. Having heard about security breaches in similar businesses, the chief executive officer (CEO) hired your company to conduct a security audit and make recommendations. Your team spent several weeks reviewing documentation provided by the CEO and chief information officer (CIO) and conducting site visits at selected stores, as well as company headquarters in Des Moines.

As you prepare to write your final report and recommendations, you review your fieldnotes from the site visits (provided in the case study). In your responses to the questions in this Assignment, you are expected to support your statements with references to the case study fieldnotes in addition to the readings and other materials that were introduced this week. Be sure to justify your statements both with references to the literature, as well as explanations in terms of business practices that are relevant to the company.

Submit a report that includes the following:

Assess the authority structure of the organization’s information systems with respect to resilience to cyberattacks. (150–225 words in 2–3 paragraphs)

Describe the COBRA and I2S2 models for risk assessment (COBRA and I2S2) and create a table to compare their advantages and disadvantages as they relate to this case study. (300–450 words in 4–6 paragraphs)

Assess the security risks for the organization based on the COBRA and I2S2 models. (150–225 words in 2–3 paragraphs)