MIS607 CyberSecurity

Task Summary Threat modelling report in response to a case scenario by identifying the threat types and key factors involved. This assessment is intended to build your fundamental understanding of these key threats so that you will be able to respond/mitigate those factors in Assessment 3. In doing so, this assessment will formatively develop the knowledge required for you to complete Assessment 3 successfully. ContextSecurity threat modelling, or threat modelling is a process of assessing and documenting a system’s security risks. Threat modelling is a repeatable process that helps you find and mitigate all of the threats to your products/services. It contributes to the risk management process because threats to software and infrastructure are risks to the user and environment deploying the software. As a professional, your role will require you to understand the most at-risk components and create awareness among the staff of such high-risk components and how to manage them. Having a working understanding of these concepts will enable you to uncover threats to the system before the system is committed to code. Task Instructions1.Carefully read the attached the c ase scenario to understand the concepts being discussed in the case. 2.Review your subject notes to establish the relevant area of investigation that applies to the case. Re-read any relevant readings that have been recommended in the case area in modules. Plan how you will structure your ideas for the threat model report. 3.Draw a use DFDs (Data Flow Diagrams): •Include processes, data stores, data flows •Include trust boundaries (Add trust boundaries that intersect data flows)•Iterate over processes, data stores, and see where they need to be broken down•Enumerate assumptions, dependencies