University of Technology Sydney SCIENCE 48730 Assessment - 3 Mitigation Plan for Threat Report.

Subject Code: MIS607 Subject Name: Cybersecurity Assignment Title: Mitigation Plan for Threat Report Lecturer Name: Shazi, Omid & LuciAcademic Integrity Declaration Academic Integrity Declaration I declare that, except where I have referenced, the work I am submitting for this assessment task is my own work. I have read and am aware of the Torrens University Australia Academic Integrity Policy and Procedure viewable online at accordingly.1. Introduction In the previous report we have identified the potential threats for the B&C Insurance company after getting confirmation from the investigation team that the ransom email received was correct. And the IT team has also found the customer data on sale on the dark web. In this report I have been asked to propose a mitigation plan for the threat's discussed in the previous report. To protect the organisations software, hardware and network from these cyber-attacks some strategies will be discussed and implemented by the organisation and this process is known as threat mitigation. Every organisations, especially insurance companies hold very delicate data for their customers like, personal and financial details. In this report, I will be discussing step by step which cyber threat is extreme or low in terms of risk levels and how the company can protect their data which has been compromised. I will also be highlighting how B&C Insurance can contain the exposure of cyber threats by identifying the threats before the attack and educating employees for cyber security. The ultimate focus of this report will be on identifying the threats for the insurance company, prioritizing according to the risk level and recommending the CEO how the risk can be the CEO how the risk can be mitigated.