IRM4728 Assignment 3 (DETAILED ANSWERS) 2024 - DISTINCTION GUARANTEED

IRM4728 Assignment 3 (DETAILED ANSWERS) 2024 - DISTINCTION GUARANTEED - DISTINCTION GUARANTEED - DISTINCTION GUARANTEED Answers, guidelines, workings and references .... Josh has discovered that an organized hacking ring in China has been targeting his company’s research and development department. If these hackers have been able to uncover his company’s research finding, this means they probably have access to his company’s intellectual property. Josh thinks that an e-mail server in his company’s DMZ may have been successfully compromised and a rootkit loaded. Question 1 (Chapter 10) [20 marks] a) Based on the scenario above, draw a process flow for the problem (10 marks) Answer? b) Identify the states that could be implemented by Josh to show the progress of the problem through its life cycle? (10 marks) Answer? Question 2 (Chapters 11 – 12) [20 marks] a) Given the above scenario, there could be common incidents reported by the incident team that do not require a problem investigation. Josh needs to know when and why problem investigation is needed to build a knowledge base and communicate problems, workarounds, and resolutions effectively. Provide a list of at least ten typical information needed to make an informed decision about incidents that require problem investigation? (10 marks) Answer: b) Discuss how John in the scenario above should assess if a reported incident leads to problem management? (5 marks) Answer 6 c) Differentiate between problem categorisation and problem prioritisation to help Josh in the scenario above with his problem management approach? (5 marks) Answer Question 3 (Chapters 13 – 15) [20 marks] a) Discuss the three four major phases of error resolution?