Create a simple ERD for a equipment management system considering the following business rule/s. A company has equipment that they have bought before hand that their employees can borrow. An employee can borrow as much equipment as they need. Each equipment must have a manufacturer, an operating system, and an anti-virus. Properly identify all entities, their proper relationships, each entities attributes (As many as you REASONABLY can)

Create a simple ERD for a equipment management system considering the following business rule/s. A company has equipment that they have bought before hand that their employees can borrow. An employee can borrow as much equipment as they need. Each equipment must have a manufacturer, an operating system, and an anti-virus. Properly identify all entities, their proper relationships, each entities attributes (As many as you REASONABLY can)

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter5: Developing The Security Program

Section: Chapter Questions

Problem 6E

See similar textbooks

Similar questions

Launch versions of operating systems and apps often include bugs. Multiple thousands of bugs have been found in popular application frameworks. When a problem is found in a piece of software, the manufacturer usually has a patch available for sale (also known as patches). The day after a new vulnerability is disclosed, criminals launch zero-day assaults. No one disputes the immorality of these criminals' actions, but what responsibility does a software firm have if its ineptitude or haste to market endangers its customers? Security fixes should be installed on a regular basis.
Book title: Cybersecurity Essentials - Charles J. BrooksChapter 1 - Infrastructure security in the Real world From the information provided in the first scenario, consider the National Institute of Standards and Technology (NIST) functions detailed in this section and observe how they relate to each category. 1. Which steps could be put in place to recover from actions intended to access, disable, degrade, or destroy the assets that has been previously identified (NIST RC.RP-1)? (Refer to screenshot for reference)
Security breaches in information systems are very commonplace these days even though some organizations have what they believe is good security controls. Because of their vulnerability to threats from hackers, internal personnel, and poor management of Hardware and software devices, security controls always need revisiting.From my perspective as manager of the Accounts and Finance department, every security breach affects this department even if it is just down time to be at meetings, to discuss strategies and costs to repair damages. When the breaches occur, unauthorized access is gained to either, do something malicious to the organization's resources to steal or sabotage data for financial gain.This usually results in the company's reputation/integrity being damaged, Loss of revenue during downtime, high costs to repair and restructure. legal ramifications are expected as well if guilty persons are found or if customers decide to sew for breach of contract and losses.Two Reasons…
What specifically are some instances of different scenarios in which overfitting could take place?
Assig 1 Evaluating Risk Handling Strategies Learning Objectives and Outcomes ▪ Evaluate appropriate risk-handling strategies for a given scenario. Assignment Requirements The X-Axis is a renowned private cancer hospital located in Las Vegas. The hospital maintains a critical database in-house that includes patient data for all patients. You are the IT security manager at X-Axis. The power from the city to the company's data center has been unstable in recent months. The database was offline twice due to power issues, once for 6 hours and once for 10 hours. You are evaluating the risk to the organization of continued power issues and database availability. For this assignment: 1. Create a table in Microsoft Word similar to the following for avoidance, transference, and mitigation risk- handling strategies. Risk Handling Strategy Description Avoidance Transference Mitigation Fill in each empty cell with a description of at least two appropriate strategies or actions. Self-Assessment…
More Malware! Ugh! For this question select a specific type of malware (Trojans Horses, Viruses, Worms, Ransomware) and identify the following (Do not use examples in the book!): What type it is (name the category of malware (see the parenthesis above). How does it infect a computer? How does it get into the computer (most common ways – not an exhaustive list); what does it do once it is there? Are there any well-known examples of this type of malware? Name at least one. Describe the damage done by it (cost of loss or number of systems affected or hack that occurred). What is the best defense against this type of malware? Explain.
Exercise 5 - Examining a real-world federated identity management (FIM) system Find a real-world FIM system you've used and examine how technically the system is / may have been implemented. Search for technical documents related to the system to understand more. For the report, describe what FIM system you examined and what you learned about it briefly. Hint: To identify the techniques used behind a FIM system, search for its name and examine any technical information you may have access to (e.g., HTML source code returned from a website, source code of the system if published under an open source license).
Book title: Cybersecurity Essentials - Charles J. BrooksChapter 1 - Infrastructure security in the Real world From the information provided in the second scenario, consider the NIST functions detailed in this section and then write what to observe as they relate to each category. 1. Policy creation sample ofmanaging access to authorized devices and resources based on the following items (NIST PR.AC-1). 2. Method creation sample of controlling physical access to secured assets (NIST PR.AC-2). 3. Action plan creation sample of informing and training general employees (NIST PR.AT-1). 4. Plan sample of helping privileged users understand their job roles and responsibilities (NIST PR.AT-2). (Refer to screenshot for reference)
Identity theft, the theft of someone else's personal information, is still a significant risk for both customers and organizations. Imagine you are the database administrator for a large company with a massive database that is accessible over the Internet. What security measures would you take to stop someone from stealing private data from a company database?
Explain the difference between strict liability and negligence.
- A policy conundrum Your organization has the following statements regarding phishing/social engineering in the employee manual: All employees are required to complete annual security awareness training as provided by the Information Security team. Employees must successfully complete the training and achieve an established minimum score on any quizzes associated with the training. The organization will conduct routine evaluations of the effectiveness security awareness training through simulated phishing tests. Employees that incorrectly identify simulated phishing emails must complete additional security awareness training and their manager will be notified. If an employee incorrectly identifies 3 or more simulated phishing emails, additional action may be taken by the employee’s manager, up to and including termination. Employees are required to report any suspicious emails to the organization’s Information Security team using the Suspicious Mail button located in the…
Research three (3) computer or security solutions that are available to purchase.Post: The name and reference for the solution: The details on what threats the solution should mitigate and how the solution addresses them.. References to any validations to their claims. What security issue the solution does not address and what would be required to augment the solution to meet this problem