The purpose of this assignment is for students to write a case study based on a common information security scenario.
Prompt
You are the senior information security manager for a federal agency. You received a phone call from an employee stating that his laptop was stolen from his workstation. He tells you that the laptop has at least 20 cases with Social Security numbers of individuals he has been assisting. How would you handle this security incident? What is the first thing you should do? How would you retrieve/destroy the data? You may have an internal thief—what would you do to find out who stole the laptop? What security violations have been committed? How would you prevent this from happening again? Write a report summarizing the issue and addressing all questions.
Specifically, the following critical elements must be addressed:
- Discuss how the situation would be handled and what steps to begin with.
- Examine how data would be retrieved and/or destroyed.
- Address what steps would be taken to determine the culprit.
- Name what security violations have been committed.
- Determine what steps could be taken in order to prevent this from happening again.
What to Submit
Your paper must be submitted as a two-page Microsoft Word document with double spacing, 12-point Times New Roman font, and one-inch margins.