Create an action plan that depicts how to implement at least (5) NIST controls o

ID: 3752447 • Letter: C

Question

Create an action plan that depicts how to implement at least (5) NIST controls on the system in a Prison. These controls will be countermeasures against the (3) common ICS/SCADA vulnerabilities related to configurations, applications, protocols, and so forth, identified BELOW Three common vulnerabilities with ICS and SCADA systems:

Buffer Overflows: this is nothing but a common vulnerability and it is caused by software code to overrun the boundary and even override the memory blocks. This kind of vulnerability can cause program crash and even corrupt the data and also it leads to execution of malicious code into the system.

Unauthenticated Protocols: In the ICS and SCADA systems, authentication protocol is used to transfer authenticated data from one entry to another so that it authenticate in between connection. When ICS and SCADA systems lack authentication, any computer can remotely connect to the network and manipulate the data. This is one of the vulnerabilities.

Poor Password policies and management: one of the most critical vulnerabilities is that weak password used for authentication. It is really important that complex passwords must be used for authentication otherwise it can be subjected to attacks or hackings.

Explanation / Answer

IF YOU WANT ANY EXTRA INFORMATION OR ELSE ANY DOUBTS FEEL FREE TO ASK

ANS:

Some of the action plans for implementing the NIST Control on the systems are:

1) Targetting the audience for managing and implementing the security planning process.

2) Organizing the documents which would contain a set of steps and activities for developing the security system.

3) Use of systems inventories as well as federal information processing standards

4) Use of major applications, support systems, and minor applications

5) Segregating the system security plan responsibilities.

Countermeasures for 3 Common ICS/SCADA vulnerabilities are:

1) Buffer overflow: GNU Compiler Collection, LLVM, Microsoft Visual Studio are few of the measures.

2) Unauthentication Protocols: Client Side certificates, NTLM etc

3) Poor Password Policies and Management: Multi-factor authentication, discourage sharing, Monitor any unusuality.

THANK YOU

RATE THUMBSUP PLZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

Navigate

Create an action plan that depicts how to implement at least (5) NIST controls o

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.

Create an action plan that depicts how to implement at least (5) NIST controls o

Question

Explanation / Answer

Related Questions

Navigate