Description
For each scenario below, imagine that you are in charge of security. Apply the security mindset to
answer these questions:
What assets are important for you to protect?
What security threats will you choose to defend against?
What countermeasures can you justify, in terms of costs and benefits?
Answer each of the above in the form of a bulleted list, with brief justifications or explanations as
necessary. Your explanations for each part should be approximately a paragraph in length. The
overall response should be no less than three pages and no more than 6 pages. State any critical
assumptions you decide to make. Your grade will be based on the thoroughness, realism, and
thoughtfulness of your analysis.
2 1–2. Pick two of the following scenarios.
(If you submit responses for more than two, you’ll receive the two lowest scores.)
(a) You oversee the football stadium at a Big Ten school.
(b) You run Chez Betty, the self-checkout convenience store located in room 2817 BBB.
(c) As head of IT for an international law firm, you are responsible for a document management system; some documents stored there are about sensitive legal, financial, or
political matters.
(d) You are grading homework submissions for a class of 360+ students.
(e) You are overseeing the security for the G20 summit, inexplicably scheduled for Ann
Arbor this July.
3. Choose another scenario from everyday life that we haven’t discussed in class.
Your choice may be directly related to computer security, but it doesn’t have to be.
Submission Template 3
# Problem 1
Scenario:
{Lottery|Stadium|Betty|Email|Grading}
Assumptions:
explain_your_assumptions
Assets:
– Asset – explanatory_paragraph
– Asset – explanatory_paragraph
…
Threats:
– Threat – explanatory_paragraph
– Threat – explanatory_paragraph
…
Countermeasures:
– Countermeasure – explanatory_paragraph
– Countermeasure – explanatory_paragraph
…
# Problem 2
(Use the same format as Problem 1 for a different scenario from the list.)
# Problem 3
Original Scenario:
explain_your_scenario_and_assumptions
Assets:
…
Threats:
…
Countermeasures:
…
