You are a new addition of the information assurance staff of a repair parts distributor. You serve companies such as NAPA and AutoZone, however, you are also about to bid on a contract to provide parts distribution to the military. The parts you will provide to the military are not sensitive in themselves, they are normal automotive parts for military vehicles. Your organization is located at four centers in the US: Baltimore, MD; Corpus Christi, TX; Sacramento, CA; and Pensacola, FL. Your headquarters is in Baltimore. All four locations have the operations database at mirrored for ease of access. All four locations lease their buildings and online virtual meeting spaces. Your company has devices that have been identified to be vulnerable when this story was published (https://www.wired.com/story/devils-ivy-iot-vulnerability) You outsource your network maintenance to a third party contractor. Your leadership is worried about your networks being vulnerable from outside actors b

You are a new addition of the information assurance staff of a repair parts distributor. You serve companies such as NAPA and AutoZone, however, you are also about to bid on a contract to provide parts distribution to the military. The parts you will provide to the military are not sensitive in themselves, they are normal automotive parts for military vehicles. Your organization is located at four centers in the US: Baltimore, MD; Corpus Christi, TX; Sacramento, CA; and Pensacola, FL. Your headquarters is in Baltimore. All four locations have the operations database at mirrored for ease of access. All four locations lease their buildings and online virtual meeting spaces. Your company has devices that have been identified to be vulnerable when this story was published (https://www.wired.com/story/devils-ivy-iot-vulnerability) You outsource your network maintenance to a third party contractor. Your leadership is worried about your networks being vulnerable from outside actors because you may be working with the military. You have no control over the vendors that provide parts to you or the organizations you provide them to. Both provide information to your organization for the status of shipments. Currently, both feed information into your computer network databases. Explain how you are going to assess and prioritize the threats and then what decision you will recommend based on the previous slide’s requirements. Final Project Criteria: Note: There is no absolute “right” or “wrong” answer to this. However, you must integrate what you are presented in this course and expand upon it on your own to answer the requirements. This is an exercise to force you to think both creatively and critically. How well you do this determines your grade. MAKE SURE THIS IS ANSWER ON THE PRESENTATION How did you gather your intelligence? Who is the threat? What are the risks to the organization? How may the organization be impacted by regulations or laws because of these risks? (I understand you are not a lawyer; however you need to know your constraints and legal requirements) How do you prioritize the threats since resources are finite? What do you recommend as a decision to leadership? What is the rationale for your decision? What will your decision cost in terms of money, time, resources, etc.?