Assignment Requirements (point values in parentheses)
Task- Transportation Organization
In the discussion portion of this module you joined a group and have worked together to perform an investigation and create a CONOP document outline that encapsulates the dynamic elements of people, processes, and technology of an organization. Given what you have collected to date create a more formal written document which answers the following requirements:
Inventory the organization’s most valuable D, I, & K assets. What does raw versus massaged information look like? What knowledge formulations are specific to this area that you will need to study in greater depth? What weakness appear in identifying what DIK might be exploited? (10)
Provide a metric or metrics on how would you might value the organization’s data/information/knowledge. What would be the cost to recreate it from scratch? What criteria beside cost play a role? (10)
Capture the organizational structure, its functional elements, and key positions. (10)
Attempt to identify specific customers, suppliers, & partners; what are the entities and the one-to-one or position-to-position relationships within the organization. (10)
Identify what cyber technology, i.e., HW SW Comm infrastructure, protocols, databases the organization uses & understand how the elements interact digitally. (10)
Within the chosen environment/community, research how data is accumulated, how processes work, and what storage, computing, & communications mechanisms are in typical use. Who has possession, control, access to the critical cyber technology elements. What levels of access (create, read, write, delete) are provided to identifiable key individuals? (10)
As you are examining the organization look for potential people process & technology threats & vulnerable access points that exhibit poor physical or digital security, yielding gaps that might be exploited. Your final deliverable should point out a minimum of twenty potential threats, vulnerable access points, and/or actual attacks. Assume an understaffed and/or relatively poorly qualified cyber security function, and only moderate attention to information security throughout the organization. (20)
Provide at least 20 references (10)
Attention to grammar, writing style, etc. (10)
Caution do not label identifiable material of specific organization(s), e.g. XYZ Corporation, or person(s), Jane Doe unless it is from an open source. Organizations that market to these channels should be pursued for information. Look for common information systems packages used in the sector; vendor packages should be examined that are available for routine business, collecting & storing intellectual property, handling email, for creating CAD or CAM drawings, for storing records, etc. You might also consider companies that collect and sell D, I, or K, whether legally operating in the U.S., or that might be operating in illicit channels domestically or overseas, not subject to U.S. law.
Deliverables
Your report should be organized into the sections outlined above and include a list of references. Paper length, not including references, should be a minimum of 1500 words and no more than 3000. Diagrams, tables, charts, and footnotes are required to support your work. Your paper should adhere to APA reference standard format.
