Discuss how STIGS can be used as checklists to help secure system components such as databases and operating systems.

Tasks/Content: For your final step, you will need to synthesize the
previous steps and focus on improving authentication & authorization
mechanisms in your enterprise/organization. It is the responsibility of
diligent cyber experts, such as yourself, to provide reports such as
these to enable teams the ability for quick reference of your analysis
and research. You know, after and during risk assessment, that the most
important thing you want to focus on is who has access to what resources
and whether various users and administrators continue to need that type
of access since the company and the roles in your company are fast
changing.
You will prepare a technical report that summarizes your findings
from the STIG analysis and major takeaways and lessons learned from your
discussions, readings and research on Access Control and
Authentication. Discuss how STIGS can be used as checklists to help
secure system components such as databases and operating systems. Even
though we only reviewed in detail the High severity findings, for a
couple of the security-related areas, discuss implications of performing
STIGS that incorporate all findings for a specific system component and
challenges with implementation across all system components. Discuss
gaps found in your risk analysis and specifically how those gaps can be
filled.
The report should include a title page, table of contents, list of
tables and figures (as applicable), content organized into sections, and
a list of references.
Check Your Evaluation Criteria
Before you submit your assignment, review the competencies below,
which your instructor will use to evaluate your work.
A good practice would be to use each competency as a self-check to
confirm you have incorporated all of them.
To view the complete grading rubric, click My Tools, select
Assignments from the drop-down menu, and then click the project title.
1.6: Follow conventions of Standard Written English.
2.4: Consider and analyze information in context to the issue or problem.
5.1: Perform a risk assessment to identify risk to an organization and prepare appropriate responses.
5.3: Design and develop systems based on fundamental security
design principles employing multiple layers of protection to meet
mission security goals.

Last Completed Projects