Ballot Online, a company providing voting solutions to a global client base,

at
Categories
Tags

 

As an IT analyst for BallotOnline, a company providing voting solutions to a global client base, you are working to convince the organization to move the current infrastructure to the cloud.

Your supervisor and the director of IT, Sophia, has asked you to summarize for the company executives the potential risks and compliance issues that BallotOnline will have to contend with in the transition to the cloud.

The final report will be seven to 10 pages that convey your understanding and management of risks associated with cloud computing, as well as ensuring compliance with legal requirements involved in moving BallotOnline systems to the cloud.

Step 1: Research Risks Associated With Cloud Adoption

The first step in assessing risk in cloud computing will be to identify and describe risk concepts and cloud computing risk factors associated with cloud adoption. As a software as a service (SaaS) company considering an infrastructure as a service (IaaS) cloud service provider for your hosting needs, consider third party outsourcing issues and the generally accepted best practices for cloud adoption and review relevant cloud risk case studies. You should also consider best practices for cloud adoption.

As part of the risk management process, identify and describe other types of risk, such as risks associated with having a service-level agreement (SLA). An example of a potential risk could be if your company is obligated to protect personal information, and then the cloud provider that you use suffers a security breach exposing that personal information.

Here, identify and describe other types of risks or potential liability issues that apply to BallotOnline.

Step 2: Identify the Most Appropriate Guidelines for Managing Risks

In order to identify guidelines applicable to your company’s industry, you must have an understanding of the different types of risk management guidelines that exist and are frequently applicable in cloud environments.

There are several cybersecurity standards applicable to cloud computing environments such as the NIST Cybersecurity Framework, ISO standards, and US federal government standards (DoD/FIPS), as well as several major sets of risk guidelines for dealing with the risks involved. Also, there are organizations such as the Cloud Security Alliance (CSA) that recommend best practices for managing risks.

Review the different guidelines and determine which are most appropriate for BallotOnline. For example, NIST has responsibility for developing a number of elections industry guidelines within the United States.

Identify why those guidelines are most appropriate and compile these items into a brief (one page or less) recommendation and justification of your choice. Your recommendation will also be incorporated into your final report in the final step.

Submit your recommendation to Sophia to review before you present your final work.

Step 3: Identify Potential Privacy Issues and Mitigation Measures

Now that you have identified the guidelines most applicable to your organization, it is time to discuss privacy protections that may apply.

BallotOnline is now a global organization and may need to contend with several sets of privacy laws since these laws vary from country to country.

Sophia has recommended that you focus on European Union (EU) privacy requirements for now, including the General Data Protection Regulation (GDPR), since those are considered to be the most challenging for compliance. Many companies opt to host data for their European customers entirely within facilities in the European Union, and the companies implement restrictions to prevent data for EU citizens from crossing borders into non-EU zones. This is the approach that you have been asked to take and where you should focus your efforts. Note that some cloud providers, such as Amazon, have received special approval from EU authorities to permit data transfer outside of the EU.

Research EU privacy requirements, identify the requirements that apply to your project, and why they apply and compile your recommendations for complying with these requirements. These will be incorporated into your final report.

Before moving on to the next step, discuss privacy issues in one page or less, and submit it separately before you submit your final work.

Step 4: Create Risk Management Matrix

Now that you have identified and described the types of risks that may apply to your organization, create a risk management matrix to assess/analyze that risk, and make recommendations for risk mitigation measures.

This Sample Risk Assessment for Cloud Computing will give you an example of a completed risk matrix.

Use the risk management matrix template to identify risks and write a brief summary explaining how to understand the data. Submit it to Sophia for feedback before you present your final work.

Step 5: Describe Cloud Security Issues

Now that you have completed the risk analysis, you can start to identify cloud and network security issues that may apply in BallotOnline’s operating environment, including data in transit vulnerabilities and multifactor authentication.

Consider cloud computing risks, network security design, information security, data classifications, and identity management issues. Your findings will be incorporated into your final report.

Discuss these security issues in one page or less, and submit it separately before you submit your final work.

Sample Solution

Multicellular organisms are composed of the macroscopic host and its symbiotic commensal microbiota. These complex communities of microbes include bacteria, fungi, viruses, other microbial & eukaryotic species.1,2 The immune system-microbiota interactions have a symbiotic relationship where microbiota plays an important role in the induction, training, and function of the host immune system and the immune system, in return, maintain these highly diverse and evolving microbes of the host.3 This symbiotic interaction between microbiota and the host helps in functioning of immune system in mammalians, plants, insects and aquatic organisms. Furthermore, the immune system and microbiota also engage “cross-talk” which involves exchange of chemical signals in many animals. This helps immune system to recognize the types of bacteria which are harmful to the host and then combating them, and it also helps in identifying the beneficial microbiota and allowing them to carry out their functions like immune reactivity and targeting.4-5

Mechanisms of microbiota in the immune system:

Cytokine induction:

Microbiota modulates immune response by acting locally and systemically. Shift in composition and density of microbiota affects systemic immunity. It promotes dermal T cell function and thereby producing IL-1α which in turn directly controls the capacity of dermal resident T cells in to producing inflammatory cytokines like IFN-γ and IL-17A. Furthermore, oral cavity also harbors a unique and complex microbiota which have role in promoting the inflammasome activity resulting in local increase of the inflammatory cytokine IL1β.6Reduction of gut microbiota via broad-spectrum antibiotic treatment have shown blunted T and B cell response against intranasal infection with influenza which helps in considering its role in promoting the inflammasome-mediated induction of IL-1β and IL-18 secretion.7-8

Induction of regulatory responses:

Tissue homeostatsis maintenance is extremely important for the host survival and it depends on a complex and coordinated set of innate and adaptive responses involving microbiota and pathogens. Foxp3 regulatory T (Treg) cells helps in maintaining both peripheral and mucosal homeostasis throughout the lifespan of the host.9-11 If disruption occurs in the homeostasis of these cells, it would cause loss of oral tolerance and development of aberrant effector responses in the gut. Induction of Treg cells is known to confer a health benefit to the host. Microbiota also helps in controlling oral antigen sampling by mucosal DCs and they also promote the induction of lamina propria resident macrophages by local expansion of Treg cells.12-13 Also, tissue specific factors like Vitamin A and MUC2 which are produced by intestinal goblet cells helps in regulation of mucosal dendritic cells.14-15Production of polysaccharide A (PSA) by a prominent human symbiont Bacteroides fragilis provided first demonstration of induction of regulatory responses by microbiota.16 B. Fragilis helped in promoting Treg cell function and induction via engaging the microbial derived PSA with TLR2 expressed by T cells.17Furthermore, SCFA and in particular butyrate also helps in regulating the size and function of the regulatory T cell network by promoting the induction of regulatory T cells in the colonic e

This question has been answered.

Get Answer