Cis week 5 classwork class discussions - Assignment Example

Risk Management Grade Emerging information technology security threat Data loss This is where companies loose valuable data through theft. Since most companies have confidential information about their customers, it is therefore a big risk if these data fall in the hands of hackers or people with malicious intentions.Internet attackThis is a way of embracing technology and by doing this; organizations are exposing themselves to global threats (Horn, 2009). Diligence should be taken to protect both the organizations and the customers.

Common response techniquesPolicies and user education programMost hacking is done through accessing employee’s password. It is therefore that organizations put up policies on how the company’s data should be accessed and by whom. The company should also educate their employees on the risks involved if they give their passwords to strangers or any other person.Secure points of entry and exitData is most vulnerable at the points where the computers of the company are connected to the outside world like the internet.

It is important that the IT managers to implement necessary defenses at these points (Murphy & Zwieback D, 2011).Implementation of content filtering technologyThis is where the company restricts the sites to be accessed by the employees since some sites are not secure and can be the source of threat attacks.Develop a relationship with law enforcersThe company should work in close relationships with local and federal enforcers of law since most of the hackers are organized criminals (Murphy & Zwieback D, 2011).

Steps required for recovery from attackIdentify the type of attackAnalyze the impact of the attackImplement proper systems to mitigate the threatsDoing the business impact analysisComparison and contrast of qualitative risk and quantitative risk analysisQualitative risk analysis is risk-level, easy and quick to execute, does not require any special tool or software and it is subjective in evaluating the probability and the impact of the risk. On the other hand quantitative risk analysis is project-level, consumes time, specialized tool may be required and it gives probabilistic estimates of time and cost.

Qualitative analysis is useful in projects which are small in nature and have less risk threat while quantitative risk analysis is useful in big projects which are prone to high threat.Mitigating RiskBusiness impact analysis being the determination of the impact an incidence can have, all the parties involved will be affected by one way or the other. People have to be compensated to their normal life they had from the incidence, and proper systems have to be in place to oversee that the incidence is totally mitigated.

Data should be kept proper as this will amount on the total costs incurred in the analysis and properties should be rebuild again and the owners given their title.ReferencesMurphy, & Zwieback D. (2011). Managing Emerging Security Threats. Retrieved on November, 5 2012 from http://www.greetsomeone.com/pdf/inkcom_managing_security_threats.pdf