CYB 405 University of Phoenix POA&M Plan of Action and Milestones

User Generated

wqhoo6777

Computer Science

CYB 405

University of Phoenix

CYB

Description

Resource: POA&M Template

Your company recently reviewed the results of a penetration test on your network. Several vulnerabilities were identified, and the IT security management team has recommended mitigation. The manager has asked you to construct a Plan of Action and Milestones (POA&M) given that the following vulnerabilities and mitigations were identified:

  • The penetration test showed that not all systems had malware protection software in place. The mitigation was to write a malware defense process to include all employees and retest the system after the process was implemented.
  • The penetration test indicated that the data server that houses employee payroll records had an admin password of "admin." The mitigation was to perform extensive hardening of the data server.
  • The penetration test also identified many laptop computers that employees brought to work and connected to the internal network some of which were easily compromised. The mitigation was to write a Bring Your Own Device (BYOD) policy for all employees and train the employees how to use their devices at work.

Complete the 1- to 2-page POA&M using the form provided.

User generated content is uploaded by users for the purposes of learning and should be used following Studypool's honor code & terms of service.

Explanation & Answer

Attached is the complete work

Information Systems Governance 1
CYB/405 Version 1

Plan of Action and Milestones (POA&M) Worksheet
Description
of
Vulnerability

Severity
Category

Mitigation

Scheduled
Completion
Date

Milestones

Inadequate
malware
protection

CAT I, most
severe and
needs action
within a month

Write and develop
malware defense
processes to
include all
organization
personnel and
retest the syste...


Anonymous
Great study resource, helped me a lot.

Studypool
4.7
Trustpilot
4.5
Sitejabber
4.4
Similar Content
Related Tags