The topic is: The Impaired nurse

Please use APA format, proper citation, a plagiarism report and a reference page with a minimum of 4-5 from reliable sources only.

Paper must be 6 – 8 pgs. long.

Instructions are attached.

– Essay Answers | www.essayanswers.org

proposals must be submitted in APA formant

A minimum of five peer reviewed journal articles must be used in your literature review.

Please see the attachment of the picture for specific requirements.

To: Chief Information Security Officer

From: VICKYSON J, Merger & Acquisitions Team

Date: March 30, 2020

Subject: Gap Analysis and Security Controls Assessment

Several events which have been identified as contributing factors towards the bankruptcy of Island Banking Services (IBS) where able to occur due to ineffective or non-existent internal controls at the IBS. The lack of effective internal controls enabled criminal conduct to occur unnoticed and prevented the reestablishment of operations after law enforcement personnel removed essential equipment and data for examination. A gap analysis has since been performed as a means of identifying applicable categories or families of security controls to remediate the risk of such events reoccurring and resulting in a shutdown of business operations.

The criminal investigation into IBS was initiated due to criminal activity that occurred at the company and went undetected. This behavior was able to go undetected due to the lack of audit and accountability controls being implemented at IBS. The audit and accountability family of security controls is defined in NIST Special Publication (SP) 800-53, Rev. 4. This family of controls requires the retention and independent review of activities and system records to ensure compliance, detect violations and performance issues, and report unlawful or inappropriate activity (Nieles, Dempsey & Pillitteri, 2017, p. 60). Controls in this family not only require the retention of systems records, but also ensure non-repudiation. This means that users actions can be uniquely traced to ensure accountability (Nieles, Dempsey & Pillitteri, 2017, p. 60). The integrating audit and accountability controls will enable auditors to detect and unlawful activity performed at IBS in the future.

When the law enforcement investigation was initiated, many of IBS’ workstations and servers were seized for forensic examination. This resulted in the halting of financial services provided by the company as IBS did not have a backup hot or cold site identified for continuity of operations. Moreover, the storage media that law enforcement seized as evidence was not backed up. This left IBS with no was to recover the data from the incident. IBS did not have proper contingency plans or incident response plans in place which resulted in a worst-case scenario situation. Having a contingency plan in place would have ensured the company were prepared for this type of incident and would have been to take steps to recover operations and minimize the damage (Nieles, Dempsey & Pillitteri, 2017, p. 61-62). For instance, IBS should have had an off-site processing facility identified with backup equipment available to restart essential operations. Moreover, as part of their contingency planning efforts, IBS also should have developed incident response plans, enabling the company to train employees and test their coop measures (Nieles, Dempsey & Pillitteri, 2017, p. 64). Both Contingency Planning and Incident Response designated security controls are identified under the Cybersecurity Framework as protective controls for information protection (NIST, 2018, p. 35). Having internal controls in place to develop and test contingency plans and incident response efforts may have very well prevented IBS from filing for bankruptcy.

To summarize, security controls from the following families (Audit and Accountability, Contingency Planning, and Incident Response) have been identified as critical gaps in the information security program for IBS. The controls that IBS currently has in place have been deemed ineffective or missing all-together. To remediate the risk of a future shutdown of operations and to deter unlawful actions, such as the that occurred under previous ownership, PBI-FS must look to immediately integrate the appropriate controls into the information security program.

Thank you,

VICKYSYON

Merger & Acquisitions Team

References

Saudi Arabia, one of the world’s largest oil producers along with Russia, is a US ally with a leader who is trying to reform the kingdom’s traditions to bring so that they fit more easily into the modern world. Saudi is playing a major role in the current economic crisis brought on by the Coronavirus pandemic. But the country is haunted by how the Saudi Crown Prince Mohammed bin Salman, has handled dissent especially the death of a prominent journalist.

1. In a 500-word post, evaluate these stories about the leadership and the current oil crisis, listing three takeaways from each about what you learned. As always details, examples and quotes will demonstrate your command of the material.

2. One question you should address is the extent to which the US should cooperate with the Crown Prince and his government.

answer to question 2 should be Fight against iran and terrorism