Our Services

Get 15% Discount on your First Order

[rank_math_breadcrumb]

Project 1

Follow the attach instructions to complete this work.

Project #1: Supply Chain Risk Analysis

Overview

For this project, you will write a research-based report on Cyber and IT supply chain risks which the client company, Sifers-Grayson must be aware of. This report will be presented to the company’s executive leadership to help them understand the overall problem of Cyber and IT supply chain risk. This problem has been raised to the attention of the company’s executive leadership by two influential customers — the US Department of Defense and US Department of Homeland Security. These two customers have raised concerns about the company’s preparedness to address and mitigate cybersecurity risks which could result from supply chain attacks. In their letter to Sifers-Grayson, these customers asked the company “what are you doing to prevent supply chain attacks?”

Background

Nofsinger consultants met with the government officials and learned that they were concerned about managing the risks from attacks such as the 2020 Solar Winds attacks and longstanding trojans/backdoor attacks in network hardware (e.g. Huawei routers) and computer system components. The Solar Winds attack compromised the software update mechanisms for a widely used set of network management tools (Korolov, 2021). Supply chain attacks which compromise hardware components purchased from non US sources are also of concern.

Nofsinger consultants also analyzed the internal business processes involved in the engineering supply chain for client Sifers-Grayson. They have learned that, when a Sifers-Grayson engineer needs parts to build a robot or drone, the engineer will place an internal order from the company’s parts stockroom. If the stockroom does not have the part immediately available, an employee will place an order with an approved vendor. These vendors are equipment resellers who purchase components from a number of manufacturers and suppliers. The company also makes purchases of components for some systems via e-Commerce websites and has encountered supply chain issues as a result of using these systems to purchase common components such as CPU chips, memory chips, programmable control chips, power supplies, graphics cards, network interface cards, and mass storage devices. Some may be brand-name components while other, less expensive products, are made by companies who are less well known. They also learned that Sifers-Grayson does not have a controlled process for testing software updates prior to the updates being installed on computer systems in the company’s R&D labs.

Finally, the consultants learned through interviews that, at times, there are supply chain shortages which may result in a reseller substituting generic products for brand name products. The consultants informed Sifers-Grayson that such substitutions can increase risks associated with purchasing products from third parties whose reputations are unknown or less well established. The company responded that it has a quality assurance process which checks purchased parts for physical damage or lack of functionality. The consultants believe that this process can be improved to reduce the likelihood of an undetected supply chain attack (e.g. malware loaded onto a USB or SSID mass storage device, programmable control chip, etc.).

Your Task

Your task is to build upon the business analysis previously conducted by the Nofsinger consultants (see overview section in this file). You must research the problems of hardware and software supply chain attacks and then write a research-based report for Sifers-Grayson executives which will provide them with information they can use to evaluate proposed solutions for addressing the identified supply chain risks. Use the authoritative sources provided below (under “Research”) to start your investigation into the issues. Then, follow the required outline (See “Write” in this file) to organize and write your report. You must paraphrase information from your authoritative sources and provide appropriate citations which identify your sources so that readers can
fact check your work.

Research

1. Research Cyber Supply Chain Risks affecting industry in general. Here are some suggested resources to get you started:

a.

b.

c.

d. Information and Communications Technology Supply Chain Risk Management (ICT SCRM)

e. Key Practices in Cyber Supply Chain Risk Management: Observations from Industry (NISTIR 8276)

2. Research Hardware Supply Chain Attacks including trojans/backdoors in commercial network hardware

a.

b.

c.

3. Research Software Supply Chain Attacks including the Solar Winds Attack

a.

b.

c.

d.

4. Research best practices and recommended strategies and approaches for managing Cyber and IT supply chain risks

a.
Best Practices in Cyber Security Supply Chain Risk Management



b. Supply Chain Cybersecurity: Experts on How to Mitigate Third Party Risk

c. 5 Cybersecurity Best Practices for your Supply Chain Ecosystem

Write

1.
An introduction which addresses the problem of Cyber and IT supply chain security. Your introduction should clearly explain what a supply chain is and why it is important to a manufacturing firm like Sifers-Grayson.

2.
A section on Cyber and IT
supply chain risks
in which you identify and describe specific sources of cyber or IT supply chain risk which could impact Sifers-Grayson’s operations and its products and services. Begin this section with an overview followed by the two required sub-sections. You should have at least 3 hardware supply chain related risks and 3 software supply chain related risks (six or more total risks).

a.
Use a sub-section to address 3 or more risks of attacks which could impact hardware components used in manufacturing robots and drones (focus on components obtained from third-parties and vendors via the hardware supply chain). You should also address the networks and computers used in the manufacturing facility (which are also obtained via the hardware supply chain).

b.
Use a sub-section to address 3 or more risks of attacks against the software supply chain (e.g. attacks against the software supply chain for software used to program and test control systems for the robots and drones produced by Sifers-Grayson).

3.
A section on
best practices for reducing risks in the Cyber and IT supply chain.
In this section you must identify and discuss 5 or more best practices for managing Cyber and IT supply chain risks in a manufacturing industry. You must also provide an evaluation of the expected benefits from implementing each of these practices.

4.
A
summary and conclusions section
in which you present an overall picture of the supply chain risk problem in a manufacturing industry and best practices for managing Cyber and IT supply chain risks.

Submit for Grading

Submit your work in MS Word format (.docx or .doc file) using the Project 1 Assignment in your assignment folder. (Attach the file.)

Additional Information

1. Consult the grading rubric for additional content and formatting requirements for this project.

2. Your 4-5 page paper should be professional in appearance with consistent use of fonts, font sizes, margins, etc. You should use section and sub-section headings in addition to page breaks to organize your paper.

3. You are allowed to exceed the page count listed under item #2 but you should focus upon providing a clear and concise written analysis. Graphics, title page, table of contents, and reference list do not count towards the page count.

4. Your paper should use standard terms and definitions for cybersecurity concepts.

5. The CSIA program recommends that you follow standard APA formatting since this will give you a document that meets the “professional appearance” requirements. APA formatting guidelines and examples are found under Course Resources. An APA template file (MS Word format) has also been provided for your use CSIA_Paper_Template(TOC+TOF,2021).docx.

6. You must include a cover page with the assignment title, your name, and the due date. Your reference list must be on a separate page at the end of your file. These pages do not count towards the assignment’s page count. The table of contents from the template is not required for this assignment and does not count towards the page count. However, if you leave the table in place, you must update it so that it shows correct headings and page numbers.

7. You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. 

8. You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must follow a consistent citation style (APA, MLA, etc.). If you paste in graphics, you MUST provide a caption with an in-text citation that identifies the source (treat it like a quotation).

9. References

Korolov, M. (2021, January 12).
What are supply chain attacks, and how to guard against them. Retrieved from

Share This Post

Email
WhatsApp
Facebook
Twitter
LinkedIn
Pinterest
Reddit

Order a Similar Paper and get 15% Discount on your First Order

Related Questions

D 8 of 485

Follow the attached instructions to complete this work.   Strategies for Addressing Global Threats You will start by writing a short paper as described in the discussion question. You will be using information from this week’s readings and from your own research to address the information needs expressed in the

D 7 of 485

Follow the attached instructions to complete this work. Leadership Update: Cyber Crime   You will start by writing a short paper as described in the discussion question. You will be using information from this week’s readings and from your own research to address the information needs expressed in the question.

D 8 of 413

 Follow the attach instructions to complete this work. Budgeting for Cybersecurity   You will start by writing a short paper as described in the discussion question. You will be using information from this week’s readings and from your own research to address the information needs expressed in the question. Create an

Computer Science written assignment 3

Written Essay Assignment 3-1: · Identify common risks, threats, and vulnerabilities found in the LAN-to-WAN Domain that require proper security controls for mitigation · Identify network and security policies needed to properly secure the LAN-to-WAN portion of the network infrastructure · Write a 2-3 page APA-formatted essay that identifies network

project 3 of 485

Follow the attach instructions to complete the work. Make sure it aligns with the Rubric Project #3: Presentation for Board of Directors Your Task: Padgett-Beale’s Chief Information Security Officer (CISO) has tasked you to continue supporting the Merger & Acquisition team’s efforts to bring Island Banking Services’ security program into

project 2 of 485

Fellow the attach instructions to complete this work. Make sure it aligns with the Rubric Project #2: Cybersecurity Implementation Plan Your Task: The Acquisition of Island Banking Services has moved from the strategy development phase to the integration phase. In this phase, the M&A team will develop transition and implementation

PROJECT 1 of 485

Fellow the attach instructions to complete this work. Make sure it aligns with the rubric Project #1: Cybersecurity Strategy & Plan of Action Your Task: You have been assigned to support the Padgett-Beale Merger & Acquisition (M&A) team working under the direct supervision of Padgett-Beale’s Chief Information Security Officer (CISO).

proj3-Final

Project 3: Cloud Portfolio Report  Step 1: Review BallotOnline’s Cloud Services Offerings  You’ve now had a lot of experience working on many aspects of the cloud at BallotOnline, and you will take a look at what you’ve done in the past. In this step, you will write up how you

AWS Simple Monthly Calculator

Discussion: AWS Simple Monthly Calculator Contains unread posts Now that you have discussed BallotOnline’s cloud services offerings, you will discuss the AWS Simple Monthly Calculator. You should cover the following areas: · What are some of the general use cases that are covered? · What are the requirements to use

D 5 0F 485

Follow the attach instructions to complete this work. Assessing Maturity for Cybersecurity Program Before you begin read:  Our class focuses on integrating many different aspects of cybersecurity, information security, and information assurance.  Recent developments in the field of cybersecurity have resulted in a number of “maturity models” which can be

Discussion 4 of 413

Follow the attach instructions to complete the work Data Breach Reporting Policy Review the Red Clay Renovations company profile and the weekly readings. Provide specific information about “the company” in your response. Due to changes in state and federal laws, Red Clay leadership decided the CISO will be the sole

discussion 4 of 485

Follow the attach instructions to complete this work. Cultural Differences as Barriers to Success The Merger & Acquisition team hired a team of external consultants to assist with identification of cultural issues which could result in barriers to the successful acquisition of Island Banking Services by Padgett-Beale. The consultants conducted

project 3 of 413

Follow the attached instructions to complete this work Download the attached detailed assignment description for this project. You should also review the rubric shown below for additional information about the requirements for the project and how your work will be graded. Please make sure that you use both the assignment description file

Project 2 of 413

Follow the attach instructions to complete this work. Make sure it aligns with the rubric Project #2: Manager’s Deskbook Company Background & Operating Environment Red Clay Renovations is an internationally recognized, awarding winning firm that specializes in the renovation and rehabilitation of residential buildings and dwellings. The company specializes in

Project 1 of 413

Follow the attach instructions to complete this work. Make sure it aligns with rubric Project #1: Employee Handbook Company Background & Operating Environment Red Clay Renovations is an internationally recognized, awarding winning firm that specializes in the renovation and rehabilitation of residential buildings and dwellings. The company specializes in updating

Discussion and Replies

Please see attachment for instructions     Discussion   In 250 words total, answer the questions below with 4 evidence base scholarly articles. APA format. 1. Discuss some of the common issues with implementation of security policy. 2. What are some possible mitigations to ensure policy can be enforced. Replies

revision x 10

I need someone to follow all of the instructions that is provided for revision that can be done no later than tomorrow, do not request bid if this price is not enough or if you cannot fulfill the requirements this is a time sensitive manner I cannot wait 3-4 days