I’m working on a cyber security project and need support to help me understand better.The security posture of the information systems infrastructure of an organization should be regularly monitored and assessed (including software, hardware, firmware components, governance policies, and implementation of security controls).The monitoring and assessment of the infrastructure and its components, policies, and processes should also account for changes and new procurements in order to stay in step with ever-changing information system technologies.The data breach at the US Office of Personnel Management (OPM) was one of the largest in US government history. It provides a series of lessons learned for other organizations in industry and the public sector. Some failures of security practices, such as lack of diligence with security controls and management of changes to the information systems infrastructure, were cited as contributors to the massive data breach in the OPM Office of the Inspector General’s (OIG) Final Audit Report, which can be found in open-source searches.Some of the findings in the report include:weak authentication mechanisms;
lack of a plan for life-cycle management of the information systems;
lack of a configuration management and change management plan;
lack of inventory of systems, servers, databases, and network devices
lack of mature vulnerability scanning tools;
lack of valid authorizations for many systems; and
lack of plans of action to remedy the findings of previous audits.
The breach ultimately resulted in removal of OPM’s top leadership. The impact of the breach on the livelihoods of millions of people may never be fully known.There is a critical need for security programs that can assess vulnerabilities and provide mitigations.In this project, there are eight steps, including a lab, that will help you create your final deliverables. The deliverables for this project are as follows:Security Assessment Report (SAR): This should be an eight- to 10-page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
Risk Assessment Report (RAR): This report should be a five- to six-page double-spaced Word document with citations in APA format. The page count does not include figures, diagrams, tables, or citations.
Lab: In a Word document, share your lab experience and provide screenshots to demonstrate that you performed the lab.
CompetenciesYour work will be evaluated using the competencies listed below.1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.
1.2: Develop coherent paragraphs or points so that each is internally unified and so that each functions as part of the whole document or presentation.
1.3: Provide sufficient, correctly cited support that substantiates the writer’s ideas.
1.4: Tailor communications to the audience.
1.5: Use sentence structure appropriate to the task, message and audience.
1.6: Follow conventions of Standard Written English.
5.2: Knowledge of architectural methodologies used in the design and development of information systems, including the physical structure of a system’s internal operations and interactions with other systems and knowledge of standards that either are compliant with or derived from established standards or guidelines.
5.6: Explore and address cybersecurity concerns, promote awareness, best practice, and emerging technology.
7.3: Knowledge of methods and tools used for risk management and mitigation of risk.
8.1: Demonstrate the abilities to detect, identify, and resolve host and
network intrusion incidents.
8.2: Possess knowledge and skills to categorize, characterize, and prioritize an incident as well as to handle relevant digital evidence appropriate
STEP 1 Enterprise network diagram
STEP 2 Enterprise Threate
STEP 3 Scan the network
STEP 4 Identify security issues
STEP 5 Firewalls and encryption
step 6 Threat Identification
Step 7 Risk and remediation
Step 8 Creating the SAR and RAR
Note I am responsible for the Lap work.I need support with the security assessment report and Risk Assessment report
