Author: chris

Overview:For this milestone, you will prepare an initial security planning report. This document will become the foundation for the final risk assessment and mitigation strategy (due in Module Seven). For scenario details, refer to the Final Project Guidelines and Rubric document.

 

The report should include the following elements:

• Network Diagram. Create a diagram of the topology of the network layout for the airport scenario.
• Stakeholder Information. Identify the roles or groups you would consider stakeholders. Identify key responsibilities and relationships.
• Relevant Laws and Regulations. Summarize legal issues that need to be considered. Identify relevant laws and regulations that pertain to this scenario.

• Preliminary Risk Assessment. Outline identified IT security risks. Be sure to address the following areas:

 

o   Viruses and Malicious Software

o   Web Strategies and Protocols (browsers, cryptographic posture, and server and protocol securities)

o   External Threats (firewalls, intrusion detection, and intrusion prevention systems)

 

• Operational and Technical Controls. Outline proposed controls to mitigate the risks identified in the preliminary risk assessment. You will elaborate on these controls in the final report.
• References. Create a reference page in APA format of resources you tentatively plan to use. Include 7 to 10 resources, including professional journals. Recommendations for resources include NIST documents and course text.

 

Format: The initial security planningmilestone should follow these formatting guidelines: four to six pages, double spacing, 12-point Times New Roman font, one-inch margins, and a minimum of six resources. Citations and references must follow APA guidelines.

 

 

 

Rubric

Critical Elements	Exemplary	Proficient	Needs Improvement	Not Evident	Value
Network Diagram	Meets the criteria for “proficient,” and the diagram is professional in appearance (20)	Provides an accurate diagram of the topology of the network   (17)	Provides an incomplete or partially inaccurate diagram of the topology of the network (11)	Does not include a diagram of the network   (0)	20
Stakeholder Information	Meets the criteria for “proficient” and includes meaningful examples of key responsibilities and relationships (20)	Provides a list of stakeholders and identifies their main responsibilities and relationships   (17)	Provides an incomplete or partially inaccurate list of stakeholders and their responsibilities (11)	Does not provide a list of stakeholders and their responsibilities   (0)	20
Relevant Laws and Regulations	Meets the criteria for “proficient” and includes an insightful discussion of less obvious issues   (20)	Effectively summarizes key legal issues and relevant laws and regulations   (17)	Provides an incomplete or cursory explanation of legal issues and laws and relevant laws and regulations (11)	Does not summarize legal issues or relevant laws or regulations     (0)	20
Preliminary Risk Assessment	Meets the criteria for “proficient” and considers a broad range of risks to the airport, internal organizations, and guest users (20)	Identifies major IT security risks that accurately reflect the provided scenario   (17)	Identifies a partial list of security risks that do not fully reflect the provided scenario   (11)	Does not include a preliminary risk assessment     (0)	20
Operational and Technical Controls	Meets the criteria for “proficient” and addresses broad range of mitigation strategies designed to protect theairport, internal organizations, and guest users (10)	Identifies operational and technical controls that mitigate identified IT security risks     (8.5)	Identifies a limited range of operational and technical controls that partially mitigate identified IT security risks   (5.5)	Does not identify operational and technical controls that mitigate identified risks     (0)	10
References	Provides varied and appropriate citations and references that meet all project requirements, including APA formatting (10)	Provides appropriate citations and references that generally meet project requirements, including APA formatting (8.5)	Provides citations and references that do not adequately meet project requirements   (5.5)	Does not include relevant citations and references     (0)	10
Earned Total Comments:					100%

 

1)             The following questions are based on the same scenario I used for question 3 in your week 1 homework.  That question addressed violations of the Code of Conduct.  I want to apply the same scenario to legal liabilities.  Here is a copy of the scenario:

John Smith owns a small, privately held firm.  He hired you to audit its financial statements.  He told you that the audit was to be completed in time to submit audited financial statements to a bank as part of a loan application. You immediately accepted the engagement and agreed to provide an auditor’s report within three weeks.  John agreed to pay you a fixed fee plus a bonus if the loan was granted.  You hired two accounting students to conduct the audit and spent several hours telling them exactly what to do.  You told the students not to spend time reviewing John’s internal controls but instead to concentrate on proving the mathematical accuracy of the ledger accounts and on summarizing the data in the accounting records that support John’s financial statements.  The students followed your instructions and, after two weeks, gave you the financial statements, which did not include footnotes.  You studied the statements and prepared an unqualified auditor’s report.  The report, however, did not refer to generally accepted accounting principles or to the fact that John had changed to the accounting standard for capitalized interest.

 

Here are the new questions:

 

1. a) After the audit was completed, John used the financial statements to secure a loan from a bank. Within a year, John was unable to make payments on the loan.  In the process of investigating the reason why, the bank determined that the financial statements were material misstated.  John, however, was near bankruptcy and could not pay off the loan.  The bank sued you for the balance due on the loan.  Given the violations I discussed in my solution to the week 1 homework, do you think the bank will prevail?  You answer should provide an analysis of the legal issues involved to include what basis the bank would have to sue, what you level of liability would be(proportionate or joint and several), and a clear statement of why or why not you think the bank would prevail to include how effective your defenses might be.

 

 

 

1. b) Now assume that instead of applying for a bank loan, you knew that John was planning to use the financial statements as part of a prospectus for an initial public stock offering (IPO), i.e., John’s firm sold stock directly to the public. John did and a potential investor read the prospectus and did a comprehensive analysis of the financial statements as a basis for his decision to buy a significant portion of stock in the new corporation.  A year later, the firm was doing so badly that its stock price was down to 10% of what it was after the IPO.  The investor sued both the John’s new corporation and you for his investment losses.  During the trial, the investor was able to show that the financial statements were materially misstated in key areas that affect firm value.  Given the violations I discussed in my solution to the week 1 homework, do you think the investor will prevail?  You answer should provide an analysis of the legal issues involved to include what bases (cover all that apply) the investor would have to sue, what your level of liability would be (proportionate or joint and several), and a clear statement of why or why not you think the investor would prevail to include how effective your defenses might be.

 

 

 

2)             The text lists 18 audit objectives – 8 for balances, 6 for transactions, and 4 for presentation and disclosure.  For each of the following audit procedures, list the category and specific objective each tests and provide an explanation of why you selected the category and object.  Some of these audit procedures test more than on objective and I want you to list and explain all that apply.  Assume all procedures were executed on the audit for a fiscal year ending December 31, 2014.  Fill in the following table to answer the question.  I have filled in the first item as an example.

 

 

Audit Procedure	Category	Objective	Explanation
1. Examine sales invoices for the last five sales transactions recorded in the sales journal in 2014 and examine shipping documents to determine they are recorded in the correct period.	Balance           Transaction	Cutoff           Timing	The cutoff object is to determine that transactions recorded near the end of an accounting period are included in the correct period.  The text is unclear here because it states that balance-related objectives are applied to balance sheet accounts and sales is an income statement account.  However, I believe the procedure still fits the cutoff objective.   This procedure would also test whether the transaction was recorded on the correct date.  Since transactions that are recorded at the end of the year also are recorded during the year, this objective also would apply.
2. Add all customer balances in the accounts receivable trail balance and agree the amount to the general ledger.
3. Determine whether long-term receivables and related party receivables are reported separately in the financial statements.
4. For a sample of shipping documents selected from shipping records, trace each shipping document to a transaction recorded in the sales journal.

 

 

Audit Procedure	Category	Objective	Explanation
5. Determine whether all risks related to accounts receivable are adequately disclosed.
6. Examine a sample of duplicate sales invoices to determine whether each one has a shipping document attached.
7. Inquire of the client whether any accounts receivable balances have been pledged as collateral on long-term debt and determine whether all required information is included in the footnote description for long-term debt.
8. Send letters to a sample of accounts receivable customers to verify whether they have an outstanding balance at December 31, 2014

 

 

Audit Procedure	Category	Objective	Explanation
9. For a sample of sales transactions selected from the sales journal, verify that the amount of the transaction has been recorded in the correct customer account in the accounts receivable ledger.
10. Foot the sales journal for the month of July and trace posting to the general ledger.
11. For a sample of customer accounts receivable balances at December 31, 2014, examine subsequent cash receipts in January 2015 to determine whether the customer paid the balance due.
12. Discuss with the credit department personnel the likelihood of collection of all accounts as of December 31, 2014 with a balance greater than $100,000 and greater than 90 days old.

• This assignment encourages you to use SQLite to complete the tasks listed below.
• The instructions listed below relate to SQLite.
• For guidance on how to install SQLite, watch this short YouTube video: https://www.youtube.com/watch?v=YZQuQ6jael8
• For guidance on how to create tables using SQLite, watch this short YouTube video:https://www.youtube.com/watch?v=Ev2JnjavvmE
• You are welcome to use MySQL. The instructions for using MySQL will be placed in the Students Resources Folder.
• To use other packages, please seek the approval of your subject coordinator.
• Typing the SQL statements or the results is NOT acceptable.

Instructions

From Resources under Main Menu in Interact 2 go to Students Resources Folder

Copy sqlite3.exe and cmd.exe files from the Students Resources Folder into a folder in your machine

 

Copy a5.txt from the Students Resources Folder into the folder in your machine where your SQLite file is located

 

Open a5.txt in Notepad

 

Replace yourstudentid in line .output yourstudentid.txt in a5.txt with your actual studentid i.e. for example 45446667.txt

 

From the Command Prompt type sqlite3.exe yourstudentid.db

 

Note: From the Command Prompt call the folder in your machine where your SQLite file is located before you type sqlite3.exe yourstudentid.db

 

At the SQLite Command Line type .read a5.txt [to create the tables you will use to answer this assignment’s questions]

 

At the SQLite Command Line type .quit

 

Using WordPad open yourstudentid.txt [to check the tables you created exist]

 

From the Command Prompt type sqlite3

 

At the SQLite Command Line type .open yourstudentid.db

 

At the SQLite Command Line type .headers on

 

At the SQLite Command Line type .mode column

 

Write and run SQL statements to complete the following tasks

 

1. Show all the details of the products by v_code 21344
2. Locate the record in the vendor table that does not have a value for the attribute V_STATE
3. Find the customers whose balance is greater than 200 but less than 300.
4. What is the max balance?
5. Show the names of the customers for whom we have invoices.
6. Show the CUS_CODE of the customers for whom we DO NOT have invoices.
7. Show the names of the customers for whom we DO NOT have invoices.
8. Find out how many times a customer generated an invoice.
9. List the names of the customers and how many times a customer generated an invoice.
10. Add a new attribute (field) credithistory varchar(6) to the customer table.
11. Update credithistory for customer ‘10011’ to ‘Bad’.
12. Delete the employee Leighla Genkazi from the EMP table.

 

You are required to submit:

 

1. The SQL statements for each query, which should be copied from your SQLite3 Command Line and pasted into your submission file
2. The screenshots of the results of the SQL statements which are to be copied from your SQLite3 Command Line and pasted into your submission file immediately after you execute the SQL query. If you used an output file please submit only the output file

 

 

 

Rationale

This assignment will assess your knowledge and ability to use SQL to query database tables and update them. It will also test your ability to write both simple and complex queries and run those queries to return the requested data.

Marking criteria

The following criteria will be used to assess Assignment 5:

 

Task	HD	DI	CR	PS
Write and run SQL statements to complete tasks 1-12 above	The SQL statements retrieve or update the required information for all assignment tasks using concise, correct and free of errors SQL syntax that	The SQL statements retrieve or update the required information for most of theassignment tasks using correct and free of errors SQL syntax	The SQL statements retrieve or update the required information for some of theassignment tasks using mostly correct SQL syntax	The SQL statements retrieve or update the required information for only a few of theassignment tasks using SQL syntax that contains frequent errors

 

 

 

Course Title is Business Systems Analysis/Design, not Information Systems

Milestone 1

 

For Milestone Two, you will be assessing the database needs and options for Sharpe Style. After looking at how the SDLC applies to your final project, a good next step is looking at the data. Think small and see where your requirements take you. Remember that Mary is worried about how she will keep track of her inventory when she migrates into online sales. You will be using the Milestone Two section of the template to complete this assignment. (Attached) Refer to the Sharpe Style scenario for details on the current state of the company and the business owner’s goals.

Based on what you have learned this week, assess the type of database technology the company will need to support new online services. (Read Chap 4 and 9)

Once you have established the company’s needs, you should research the available options. Present a minimum of two. Keep in mind that Mary Sharpe is looking for an inexpensive and easy-to-implement solution. What are the pros and cons of each option?

For this assignment, find a real-world example of what has or has not worked for another company. Talk about how this example informs the options you will present to Mary Sharpe. Make sure you site your source(s) appropriately.

Remember that you are an intern and are not expected to make suggestions that encompass a deep level of technical detail. You are expected to provide a high-level view of what would be required to help your business owner make an informed decision regarding database needs for online services.

Use the Milestone Two section of the template and submit the template.

For additional details, please refer to the Milestone Two Guidelines and Rubric document and the Final Project Guidelines and Rubric document in the Assignment Guidelines and Rubrics section of the course.

 

For additional details, please refer to the attachments!

 

You will take an active part in a community outreach activity of your choosing, which will affiliate you with the needs of the community (i.e., work at a shelter, a camp, a recreation center, tutoring younger children). This should be a volunteer activity, where you are doing something, rather than just observing.  Typically, this should last between 2-4 hours. However, it may take longer to successfully answer all four of the questions posed below.

This activity must take place DURING our class – – between week 1- 6. It cannot be something you did before our class began.

You will write a minimum of a THREE page paper explaining the experience and what was learned from the project. You MUST give the DATE of your outreach activity in your introduction (10 points will be deducted if you do not give the DATE of the activity.

Using the information about sociology gained from the course, you will answer several questions in detail. Remember that in formal writing we limit the use of first person.

These four questions should be your subheadings when writing the paper.

1. What was observed during the experience? (apply textbook concepts to your observation)
2. How did the experience affect you?
3. What are the needs of the population that you interacted with for this assignment?
4. How can you/others help make a difference with this group?

 

The purpose of this paper is to apply the concepts you learned in this class to what your observed. You should have reference to your textbook concepts all throughout your writing. This means to use textbook concepts to support your claims. You could lose up to 15 points if you do not apply the textbook.

The finished project should include three full pages of content and an APA formatted cover page. Please refer to the grading rubric for specific grading criteria.

Just wanted to be sure everyone is clear about formal writing in papers. Please make sure you follow these guidelines:

• Double space
• Need a cover page and Reference (work cited) page.
• 1″ margins on all sides
• Times New Roman, 12 pt font
• URLs are NOT complete references on the work cited page!
• Apply the concepts you learned from the textbook
• do NOT use wikipedia, about.com, answers.com, dictionary.com, etc. Use good reputable sources.

 

This is just a reminder to the class that the safe assign is a plagiarism checker. Any papers with 40 -60%, I will deduce that percentage off the top before I begin grading. This means if you have 60% match (on a 100 point paper), the best score you could get is 40 if there are no other mistakes.

Any papers over 60% you will receive a ZERO for the paper and an incident report will be sent to the university and placed in your file.  If you have 90% or above, you could end up with an F for the course as this would mean you copied and pasted the entire paper and this is blatant plagiarism. Again, an incident report will be completed and placed in your academic file.

 

Early user interfaces were designed with little or no consideration for the end user. This was largely due to technical and hardware limitations. The poor interface design required a specific skill set for users and limited the mass appeal of computers. Modern interfaces are much more user friendly. Theo Mandel wrote about the five (5) golden rules of interface design. Read Mandel’s article located at http://www.theomandel.com/docs/Mandel-GoldenRules.pdf.

Write a four to five (4-5) page paper in which you:

1. Describe three (3) interfaces you interact with on a daily basis.
2. Analyze each interface you identified in Question one (1) and assess how it adheres to Mandel’s five (5) golden rules.
3. Suggest two (2) changes for each interface to achieve a more user-friendly design and justify your suggestion.
4. Provide three (3) screen shots for each interface. Note: These screen shots should be labeled and appear in the appendix of the case study. These pages are not included in the page requirement for the assignment.
5. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

• Describe the usability properties of interactive systems.
• Use technology and information resources to research issues in human-computer interaction.
• Write clearly and concisely about HCI topics using proper writing mechanics and technical style conventions.

 

Review various product and service options from various companies listed in the Table 7.1 EntrepreneurMagazine’s 2012 Innovative Health Care Business Solutions Awards in Chapter 7 of your course text. Select one option, and create a multimedia presentation that addresses the following:

• Describe the product or service and its use.
• Determine its threats to existing health care organizations.
• Forecast the partnership between your selected product/company and existing health care organizations to provide better care to the patients.

To create your multimedia presentation, first create a five-slide PowerPoint, excluding title slide and reference slide, that presents the information. Then using Screenr or another screencast program, record your presentation of the PowerPoint.

Utilize a minimum of three scholarly and/or peer-reviewed sources, including the textbook, that were published within the last five years, and all sources must be documented in APA style.

Your PowerPoint presentation must include:

• A Title Slide with the following:
  • Title of your presentation.
  • Student’s name.
  • Course title/number.
  • Instructor’s name.
  • Date.
• Introduction.
• Product or Service Overview
• Threats to Existing Healthcare Organization.
• Partnership with Existing Healthcare Organizations.
• Conclusion.
• Reference slide.
• Clear organization/sequence.
• A clear and logical progression of ideas.
• Three to five bullet points (approximately five words per bulleted item).
• Relevant visuals, such as graphs and/or tables, which enhance understanding of concepts, ideas, and relationships.  You may use Creative Commons for images and visuals.
• A consistent theme, format, and font that augment the readability.

Prepare a 3 page annotated or expanded outline for review by members of a foundation grant screening committee.

 

Address the following in your outline:

• A description of how you are proposing to measure self-regulation
• The operational definitions, limitations, assumptions, hypotheses, and data analysis plans
• The deficiencies a critic might identify in your statement of limitations and assumptions

 

 

How you will measure self-regulation and your data analysis plan should be part of your Method.

 

A self-regulation self-report measure will be used with both groups.  Performance of both groups will be assessed by coaches.

 

Children in both schools or classrooms will be evaluated on grades and in class performance by teachers unaware of which children have been trained and which have not.

 

Operational definitions go with your purpose; you need to define your theoretical terms

 

behaviorist, social cognitive, information processing or constructivist theory and self-regulation and the associated techniques – whatever you are applying needs to be defined, explained and described

 

You also need a statement of deficiencies a critic might identify in your statement of limitations and assumptions.  Limitations and assumptions are about your research design

 

The sample size is too small to generalize the findings because….

The coaches knew which athletes had been trained because….

The schools or classrooms cannot be exactly equivalent because….

Etc.

 

As will all assignment options:  you need a cover page, introduction and conclusion, headings and all APA formatting correctly for citations and references, correct grammar and spelling.  Please follow the rubric.  Please ask if you have any questions.

 

Use published human and animal research and behaviorist, social cognitive, information processing and constructivist theory to develop an outline of a research proposal to measure self-regulation in one of the following fields:

 

• Environmental or evolutionary psychology
• Forensic psychology
• Health or sports psychology
• Industrial/organizational or engineering psychology

 

Research proposals need to include

An explanation of Purpose – why do you want to study self-regulation in your chosen setting?

Define self-regulation whichever theory you choose to use

Hypothesis – what you expect to have happen: the result you expect

Athletes trained in self-regulation techniques using whichever theoretical techniques you choose will do better than athletes who do not.

Grade school childrn who are trained in self-regulation techniques using whichever theoretical techniques you choose will do better than children who do not.

Method including population and process – what are you going to do and with whom?

How many of whatever population will be trained in the self-regulation techniques using whichever theoretical techniques you choose.  That population will be compared to those who have not been trained in self-regulation techniques.

One school or classroom will be trained and compared to another equivalent school or classroom.

 

Developing an Annotated Outline

The word “annotation” refers to adding information, usually comments, explanations, or references

An annotated outline, then, would be an outline to which additional information is added, also known as annotations. Information included in the annotations is determined by the purpose of the annotated outline.

Examples

This outline is not annotated.

1. Transforming chaos into order
2. Definitions of chaos and order

One way to add annotations: adding citations of sources and additional information about each of

the sources.

1. Transforming chaos into order

Arling, T.J., (2006). Understanding order and chaos. New York: Wylie and Sons.

Arling provides a broad overview of the relationship between ordered and  unordered systems. Included in this overview is a discussion of how the  contrast between these systems has affected scientific thought over the past   200 years.

Still another way to add annotations: adding complete sentences, with each sentence usable as a topic sentence for a paragraph in a project or paper.

1. Transforming chaos into order

Arling, T.J., (2006). Understanding order and chaos. New York: Wylie and Sons.

The contrast between ordered and unordered systems – order and chaos – has affected scientific thought over the past 200 years.