SNHU Cyber Security Access Control Compliance Assessment Table

Having Trouble Meeting Your Deadline?

Get your assignment on SNHU Cyber Security Access Control Compliance Assessment Table  completed on time. avoid delay and – ORDER NOW

Do my paper

Scenario

Grey Matter, where you are employed as a security analyst, has recently acquired a competitor, BrainMeld. This acquisition has proven challenging, as BrainMeld has a distinct culture that is not always aligned with the ways Grey Matter conducts business. As a company founded by two close friends, BrainMeld retained the feel of an entrepreneurial start-up, including an informal office where the company’s founders worked side by side with employees. This informality and egalitarianism was reflected in the company’s security policies, which were often loose, including in areas such as access controls.

Your company, Grey Matter, takes security seriously and is committed not only to regulatory compliance but to keeping pace with industry standards and best practices. Standardized controls from the Center for Internet Security (CIS) are the basis for internal standards used to upgrade systems and establish procedures. In matters related to access control, the Grey Matter team has sought to comply with two CIS controls:

• CIS Control 5: Account Management
• CIS Control 6: Account Control Management

In the acquisition, Grey Matter will retain the BrainMeld IT infrastructure, but must upgrade it to meet Gray Matter standards. As part of the work of integrating BrainMeld with Grey Matter, you have been asked to complete an access control compliance assessment worksheet. You will need to use the Compliance Discovery Form generated by your peers, which contains Grey Matter’s access control requirements as well as the Grey Matter security team’s enterprise access control findings.

Prompt

Using the Grey Matter access control requirements, as well as the Grey Matter security team’s enterprise access control findings, in the CYB 400 Project Three Compliance Discovery Form, complete the Project Three Compliance Assessment Worksheet. Both of these documents are linked in the Project Three assignment in Module Seven of your course. You must address the critical elements listed below. The codes shown in brackets indicate the competency to which each critical element is aligned.

1. Compliance Assessment Worksheet
   1. Employee Access
      1. Identify compliance of finding against organizational access control requirements.
      2. Explain findings that do not meet organizational requirements.
   2. Legacy BrainMeld VPN Service
      1. Identify compliance of finding against organizational access control requirements.
      2. Explain findings that do not meet organizational requirements.
   3. System Administrator Access
      1. Identify compliance of finding against organizational access control requirements.
      2. Explain findings that do not meet organizational requirements.
   4. Web Application Access
      1. Identify compliance of finding against organizational access control requirements.
      2. Explain findings that do not meet organizational requirements.
   5. File Services Access
      1. Identify compliance of finding against organizational access control requirements.
      2. Explain findings that do not meet organizational requirements.