“Security Threat Trends 2015”
Define and evaluate a security risk and measure the impact of the risk on a business organization.
Review one of the five security reports listed below and provided in the topic Resources. Your goal is to identify an interesting trend, such a high profile threat, the Internet of Things, medical devices, web hacks, etc. and write an executive summary explaining how the trend presents a risk within the industry associated with the selected security report.
“Security Threat Trends 2015”
“Worldwide Infrastructure Security Report – Volume XI”
“Internet Security Threat Report”
“2016 Trustwave Global Security Report”
“2016 Data Breach Investigations Report”
Write a 1,500-word executive summary that contains the following information.
Overview
Provide a summary of the threat trend.
Include graphs that depict the trend. You may include content form the report with appropriate citation and references.
Threat Definition
Explain the threat and how it exploits vulnerabilities within an organization.
Risk Identification
Identify the risk by detailing how exposed the organization is to the threat.
List several systems, resources, applications, or browsers that can be impacted.
Rate each system based on the likelihood and impact of the threat.
Provide a risk matrix that summarizes threat likelihood and impact.
Assign each system a value from the risk matrix to identify the risk posted to the organization.
Justify the risk matrix values.
Sample Solution
“Security Threat Trends 2015”
Cybersecurity is experiencing enormous growth, as an industry and as a theme in the daily lives of people and businesses using technology. And because our technology keeps changing at an astounding rate, threats are evolving fast too, with cybercriminals finding new and creative ways to exploit users and technology all the time. The year 2015 saw a number of impactful bugs outside the standard Microsoft platforms that many in the security industry typically have their eyes on. From Heartbleed to Shellshock, it became evident that there are significant pieces of insecure code used in a large number of our computer systems today.
