Code galore caselet Essay Example

style="text-align: justify">They want the merger with Skyhaven very urgently that too without spending much on the security they are also setting up a Wan to ease communication between both sets of employees and to allow easy access of code and data. So for code galore the most important aspect of the triad is availability and also confidentiality as the employees of Skyhaven might get access to company’s confidential data because of unavailability of security measures using various data protection techniques.

3. Change leads to risk, and some significant changes have occurred. Which of these changes lead to the greatest risk? Ans. The areas of greatest risk are :

1 Data Security: Since the companies have merged this is of prime importance as who gets to access what. 2 Confidentiality of data: The employees of Skyhaven may have access to the confidential data of code galore.

4 . Imagine that three of the greatest risk events presented themselves in worst-case scenarios. What would be some of these worst-case scenarios? Ans. The worst case scenarios would be: 1 The computers of code galore which are connected to those of Skyhaven become attacked by malicious software and viruses, that would really jeopardize the business. 2 Since the security is weak it can cause problems if the sensitive data is leaked out of the company in any way. 5. How can the CSO in this scenario most effectively communicate newly and previously identified risk events that have grown because of the changes to senior management? Ans.

The CSO can document what are the risks involved in both the cases .He should also document his suggestion

s for the mitigation of new risks. He should arrange meetings with the senior management and highlight the areas which need a prompt response before they go out of hand and lead to further losses for the company. The areas of data security and access rights have to addressed on priority followed by backup and configuration related issues.