Computer Forensics, also known as Digital Forensics, is a scientific examination by a certified computer forensic specialist, which includes the identification, collection, preservation, and analysis of all forms of Electronically Stored Information (ESI). What is CoC (Chain of Custody) and why is it important for evidence integrity? What are the common situations in which forensics are used? How a forensic investigation is typically approached? Are there any actions that should be avoided during an investigation? Please explain. 

1)

Ways HR Data May Improve Your Bottom LineTechnology is advancing at a pace that has never been seen before.  With this continuous growth in technology, data analytics is becoming more prevalent and possible in just about every area of business.  Human Resources (HR) has historically been seen as more of a ‘paper pushing’ area of business with payroll, hiring, firing, and compliance being the main areas of the industry.

However, within the last 10 years HR has become more strategic in focus and the use of data analytics in HR is quickly turning into a hot topic.  Many people might find it bizarre to use data analytics in such a people-focused profession; however, there are huge financial savings for companies that choose to do so.  Here are some areas where this can happen:

1. The Marriage of Big Data and Tax Credits – Many companies have been historically unable to tap into the HR-related tax credits available.  With big data, these credits are more able to be used to financially boost the company.
2. Managing Benefits and Health Care – The cost of healthcare benefits is a large cost for businesses.  These costs can be reduced by using data to incentivize healthy behaviors and manage healthcare benefits with a financial intelligence in-mind.
3. Identifying Retention Risks – Replacing employees is an extremely high cost to an organization.  Some employees are more costly to replace than others.  Using HR Data can help curb some of the expenses related to retention.
4. Employee Engagement – Employees being disengaged in the workplace can take a high toll on productivity and business outcomes.  This high cost can amount to millions or billions of dollars for an organization and using HR Data could reduce some of that cost.

Key Points

• There are more ways to use HR Data than just those listed in this article.
• HR Data can be expensive to use but can also have a substantially high ROI.

Discussion Questions

1. How can a business’s MIS department be most beneficial in using HR Data to reduce costs?
2. What can a business’s HR department encourage objective decision-making through data?
3. What might be some of the challenges of using HR Data to make decisions?

ReferencesGordon, J. (2016, April 21). Ways HR data may improve your bottomline. Retrieved from Forbes: https://www.forbes.com/sites/adp/2016/04/21/ways-hr-data-may-improve-your-bottom-line/?sh=64ad206665c5Rubric_ExportFile_40297202204_1657573612540.zip

2)

Read the Case StudyDemir, A. (2017). Management Information Systems: Case Study of Amazon.com. Journal of Research in Business and Management, 4(11), 11-17.  From http://www.questjournals.org/jrbm/papers/vol4-issue11/B4111117.pdfCase study questions

1. Amazon began as an on-line book retailer. How has it grown to be known as the “everything store”?
2. What aspects of Amazon’s operations management are based on the increased globalization of world trade?
3. Amazon’s marketplace focuses on smaller sellers and manufacturers by linking them with a huge customer base and fulfillment program. Can e-commerce ever truly replace the in-person shopping experience?

Case study rubric

3)

Read the case belowCrosby, Michael; et al. (2016). “Blockchain Technology: Beyond Bitcoin” (PDF). Applied Innovation Review (2): 6–19.Case study questions

1. What are the privacy issues with blockchain?
2. How does blockchain increase privacy?
3. Is blockchain the solution for privacy?
4. How does blockchain provide confidentiality?

Case study rubric

 You will review qualitative research.  The topic is up to you as long as you choose a peer-reviewed, academic research piece.  I suggest choosing a topic that is at least in the same family as your expected dissertation topic (cybersecurity) so that you can start viewing what is out there.

 Please use APA formatting and include the following information:

• Introduction/Background:  Provide context for the research article.  What led the author(s) to write the piece? What key concepts were explored? Were there weaknesses in prior research that led the author to the current hypothesis or research question?
• Methodology:  Describe how the data was gathered and analyzed.  What research questions or hypotheses were the researcher trying to explore? What statistical analysis was used?
• Study Findings and Results:  What were the major findings from the study? Were there any limitations?
• Conclusions:  Evaluate the article in terms of significance, research methods, readability and the implications of the results.  Does the piece lead into further study? Are there different methods you would have chosen based on what you read? What are the strengths and weaknesses of the article in terms of statistical analysis and application? (This is where a large part of the rubric is covered.) 

500 words with references needed.

CS 315 Homework 

1. For each of the following operations determine the result in $t0. The answer should either be expressed in hexdecimal or binary in 4 bit groups (nibbles). Given the following:

$t1 0x3FFF 7FFC

$t2 0XFFFF 0000

$t3 0x0000 FFFF

a.  and $t0, $t1,$t2

b.or $t0, $t1, $t3

c. nor $t0, $t1, $t2

d. xor $t0, $t1, $t3

As an IT analyst for BallotOnline, a company providing voting solutions to a global client base, you are working to convince the organization to move the current infrastructure to the cloud.

Your supervisor and the director of IT, Sophia, has asked you to summarize for the company executives the potential risks and compliance issues that BallotOnline will have to contend with in the transition to the cloud.

The final report will be seven to 10 pages that convey your understanding and management of risks associated with cloud computing, as well as ensuring compliance with legal requirements involved in moving BallotOnline systems to the cloud.

Step 1: Research Risks Associated With Cloud Adoption

The first step in assessing risk in cloud computing will be to identify and describe risk concepts and cloud computing risk factors associated with cloud adoption. As a software as a service (SaaS) company considering an infrastructure as a service (IaaS) cloud service provider for your hosting needs, consider third party outsourcing issues and the generally accepted best practices for cloud adoption and review relevant cloud risk case studies. You should also consider best practices for cloud adoption.

As part of the risk management process, identify and describe other types of risk, such as risks associated with having a service-level agreement (SLA). An example of a potential risk could be if your company is obligated to protect personal information, and then the cloud provider that you use suffers a security breach exposing that personal information.

Here, identify and describe other types of risks or potential liability issues that apply to BallotOnline.

Step 2: Identify the Most Appropriate Guidelines for Managing Risks

In order to identify guidelines applicable to your company’s industry, you must have an understanding of the different types of risk management guidelines that exist and are frequently applicable in cloud environments.

There are several cybersecurity standards applicable to cloud computing environments such as the NIST Cybersecurity Framework, ISO standards, and US federal government standards (DoD/FIPS), as well as several major sets of risk guidelines for dealing with the risks involved. Also, there are organizations such as the Cloud Security Alliance (CSA) that recommend best practices for managing risks.

Review the different guidelines and determine which are most appropriate for BallotOnline. For example, NIST has responsibility for developing a number of elections industry guidelines within the United States.

Identify why those guidelines are most appropriate and compile these items into a brief (one page or less) recommendation and justification of your choice. Your recommendation will also be incorporated into your final report in the final step.

Submit your recommendation to Sophia to review before you present your final work.

Step 3: Identify Potential Privacy Issues and Mitigation Measures

Now that you have identified the guidelines most applicable to your organization, it is time to discuss privacy protections that may apply.

BallotOnline is now a global organization and may need to contend with several sets of privacy laws since these laws vary from country to country.

Sophia has recommended that you focus on European Union (EU) privacy requirements for now, including the General Data Protection Regulation (GDPR), since those are considered to be the most challenging for compliance. Many companies opt to host data for their European customers entirely within facilities in the European Union, and the companies implement restrictions to prevent data for EU citizens from crossing borders into non-EU zones. This is the approach that you have been asked to take and where you should focus your efforts. Note that some cloud providers, such as Amazon, have received special approval from EU authorities to permit data transfer outside of the EU.

Research EU privacy requirements, identify the requirements that apply to your project, and why they apply and compile your recommendations for complying with these requirements. These will be incorporated into your final report.

Before moving on to the next step, discuss privacy issues in one page or less, and submit it separately before you submit your final work.

Step 4: Create Risk Management Matrix

Now that you have identified and described the types of risks that may apply to your organization, create a risk management matrix to assess/analyze that risk, and make recommendations for risk mitigation measures.

This Sample Risk Assessment for Cloud Computing will give you an example of a completed risk matrix.

Use the risk management matrix template to identify risks and write a brief summary explaining how to understand the data. Submit it to Sophia for feedback before you present your final work.

Step 5: Describe Cloud Security Issues

Now that you have completed the risk analysis, you can start to identify cloud and network security issues that may apply in BallotOnline’s operating environment, including data in transit vulnerabilities and multifactor authentication.

Consider cloud computing risks, network security design, information security, data classifications, and identity management issues. Your findings will be incorporated into your final report.

Discuss these security issues in one page or less, and submit it separately before you submit your final work.

Step 6: Examine the US Legal System and Intellectual Property Laws

Now that you are familiar with security issues, examine and review the US legal and justice systems. Since BallotOnline is a software as a service (SaaS) company based in the United States and serving a customer base in the United States, you need to understand how the legal and justice systems work in the United States. Your basic understanding of these systems is crucial for understanding the complexities of the legal system in cyberspace, where cloud-based systems reside.

As a practitioner working in the cloud computing field, you should also have an understanding of the complexities of intellectual property law and cyberspace law, including how to identify different venues and methods for resolving disputes (such as the court system, arbitration, mediation), how to define and negotiate cloud hosting agreements to avoid potential cyberspace law issues, how to discuss the regulation of cyberspace, and how to handle electronic agreements and digital signatures.

To gain a better understanding of how cyberspace laws are applied to real issues, participate in the analysis of a relevant legal case with your colleagues in a forum titled Discussion: US Legal System and Cyberspace Law.

In addition to the discussion board, your findings will also be incorporated into your Final Risk and Compliance Report for the BallotOnline executives.

Step 7: Use Frameworks to Analyze Complex Legal and Compliance Issues

In the previous step, you examined the US legal and justice systems as a building block for understanding the complexities of the legal system in cyberspace, where cloud-based systems reside.

There are several frameworks for analyzing compliance issues used to analyze these complex issues. To provide a manageable set of recommendations to the executives, review the frameworks and select the one that is most helpful to use for analyzing these complex issues.

Step 8: Analyze General, Industry, Geographic, Data, and Cloud-Specific Compliance Issues

In the previous step, you examined the complexities of law in cyberspace. In this step, you will expand your understanding of legal and compliance issues related to the cloud by investigating industry-specific compliance issues, geographic-specific compliance issues such as privacy, and cloud-specific compliance issues to determine which are applicable to BallotOnline.

You will also need to analyze data compliance issues applicable to companies operating in the European Union, including the recent GDPR regulations, and determine how BallotOnline can be compliant. The organization is concerned about EU compliance issues because the laws there are the most restrictive that BallotOnline will encounter.

Prepare a two- to three-page summary of the data compliance issues that are applicable to BallotOnline and determine how BallotOnline can be compliant. This will be part of your final risk and compliance assessment report.

Step 9: Create a Proposal for a Compliance Program

In previous steps, you have identified potential legal and compliance requirements that BallotOnline may face in migrating to a cloud computing model. Now, you need to determine how BallotOnline can comply with those requirements.

Create a high-level proposal for a compliance program for BallotOnline that enables the organization and its employees to conduct itself in a manner that is in compliance with legal and regulatory requirements. Management has asked you to model the proposal on existing compliance programs for other companies that have migrated to the cloud.

Use the Proposal for Compliance Program template to record your work and upload it to the class folder for feedback before you submit your final work.

Step 10: Write the Final Risk Assessment and Compliance Report

As you have learned, there are a number of legal and compliance requirements associated with shifting to a cloud computing model.

It’s time to put everything together in a seven- to 10-page report for BallotOnline executives: summarizing the risk assessment and mitigation as well as legal and compliance requirements associated with moving to the cloud, outlining your recommended action plans for meeting those requirements, and developing a high-level proposal for a compliance program to avoid breaches of the requirements.

Use the final risk and compliance report template to complete your report.

Use the following criteria to respond to the questions.

1.1: Organize document or presentation clearly in a manner that promotes understanding and meets the requirements of the assignment.

1.2: Develop coherent paragraphs or points so that each is internally unified and so that each functions as part of the whole document or presentation.

2.1: Identify and clearly explain the issue, question, or problem under critical consideration.

7.1: Examine legal and regulatory requirements.

7.2: Examine industry best-practices and standards.

8.1: Assess liability issues associated with cloud adoption.

8.2: Assess network security and privacy risks associated with cloud infrastructure.

8.3: Assess management and operational risks associated with cloud.

Please add references.

Week 2 Discussion — Market-Oriented Perspectives

Your contribution one — answer one question only out of four questions below after your reviewing this case —

“Samsung — Changing Strategies to Build A Global Brand”(attached here or you can find it in “Files”):

Question #1: What business(es) were Samsung in when it was a start-up company? What business(es) are Samsung in as it is today?

Question #2: What distinctive competencies have given Samsung business unit (must be specific on which business unit inside Samsung) a competitive advantage?

Question #3; Which of those competencies best match the needs and wants of the customers in the business’s target segment(s)? Must be specific on which business unit inside Samsung.

Question #4: What role should marketing managers play in helping to formulate business-level (SBU) strategies in a large diversified firm such as Samsung? What kinds of information are marketers best able to provide as a basis for planning?

You will earn maximum 2 points from your completed contribution one, if —

• You are the first person to answer any one of above four questions, given you list the question you choose to response first, followed by your answer.
• Otherwise, you will not receive a full 2 points.

Your contribution two — comment on one of your classmates’ posting about his/her contribution one.

Review APA criteria also

 Please click on the below link and submit your completed Week 13 Study Questions 1-10 and Exercises 1, 2 & 4: 

Chapter 13: Trends in Information Systems

Answer the following 12 questions by selecting the single BEST answer for each. Using your course materials and/or other credible resources, provide a 50–100-word explanation on why you chose your answer. Please cite your sources for your answers from your course materials or other credible resources.

1. Which of the following business continuity exercises can be quite involved and should be performed annually? 

A. Disaster simulation testing

B. Table-top exercise

C. Structured walkthrough

 2. Which plan is written to attempt to prevent a disaster from impacting the organization and/or to lessen a disaster’s impact?

A. Disaster recovery plan

B. Business impact analysis

C. Business continuity plan

3. While developing the business continuity plan, your team must create a plan that ensures that normal operation can be resumed in a timely manner. Which element is your team creating?

A. Vulnerability analysis

B. Disaster recovery plan

C. Business continuity plan

4. Of the following choices, what is the best form of anti-malware protection?

A. Multiple solutions on each system

B. A single solution throughout the organization

C. Anti-malware protection at several locations

5. What is the first step of a business continuity plan (BCP)? 

A. Business organization analysis

B. Select the BCP team

C. Resource requirements analysis

6. What task of BCP bridges the gap between the business impact assessment and the continuity planning phases? 

A. Likelihood assessment

B. Provisions and processes

C. Strategy development task

7. Which business continuity plan element is primarily concerned with minimizing property damage and preventing loss of life?

A. Disaster recovery plan

B. Vulnerability analysis

C. Business impact analysis (BIA)

D. Risk analysis

8. You need to ensure that all systems, networks, and major applications can be recovered. What should you create or perform?

A. vulnerability analysis

B. contingency plan

C. risk analysis

D. business impact analysis (BIA)

9. Which of the following is likely to be the most significant challenge with developing an incident management plan?

A. Lack of management support

B. Intrusion by hackers

C. Security response procedures undertaken to detect brute force attacks

10. If a forensic copy of a hard drive is needed, the copy data are MOST defensible from a legal standpoint if which of the following is used?

A. An encrypted copy of all contents of a hard drive

B. A bit-by-bit copy of all data

C. A compressed copy of all contents of a hard drive

11. What is the capability to effectively manage unexpected events to the organization with the objective of minimizing impacts and maintaining and restoring normal operations? 

A. Incident response

B. Incident management

C. Control objectives

12. What is the operational capability to identify, I prepare for and respond to incidents?

A. Risk tolerance

B. Quality assurance

C. Incident response

What is the importance of Risk assessment Documentation?