Columbia University in the City of New York The Critical Security Controls Whats NAC Got to Do with IT Discussion

I don’t know how to handle this Software Development question and need guidance.

Discussion

Please submit your initial post (200-300 words)

How does your institution deal with NAC-related issues?

What do you perceive as the strengths and weaknesses of their policies? Can you suggest improvements?

ASSIGNMENT

Having read the four (4) aforementioned required readings for the week, submit a 200-400 word (single spaced) report/paper summarizing your take-aways from the articles.

Required Reading

Read the following:

• Face Facts about Internet Security – https://www.schneier.com/essays/archives/2015/10/face_facts_about_int.html – Bruce Schneier is a well established security guru. In this brief essay, he shares some frustrations.

• Information Security Guide for Government Executives – http://csrc.nist.gov/publications/nistir/ir7359/CSD_ExecGuide-booklet.pdf – While this NIST publication is directed at government executives, it contains information that is valuable to a broader audience.

• Healthcare Provider Breaches and Risk Management Road Maps – https://www.sans.org/reading-room/whitepapers/hipaa/healthcare-provider-breaches-risk-management-road-maps-results-survey-informati-37105 – A survey on the state of security and risk in the healthcare arena.

• The Critical Security Controls: What’s NAC Got to Do with IT? – https://www.sans.org/reading-room/whitepapers/analyst/critical-security-controls-what-039-s-nac-it-35115