Cybersecurity

Mini-Project: Center for Internet Security (CIS) Controls Student Name Institutional Affiliation Course Instructor Date * This scenario violates CIS Control 4, which requires the establishment and maintenance of a secure configuration process, configuration of automatic session locking on enterprise resources, implementation and management of server firewalls, securely managing enterprise software and assets, and turning off unnecessary services on enterprise software and assets (Stetson Cybergroup, 2021a). The risk posed is that the system is vulnerable to attackers who exploit unpatched vulnerabilities. Delaying the patching process creates the possibility of a cyberattack, which can compromise a system’s confidentiality, integrity, and availability (CIA). * CIS 9 entails email and web browser protection. CIS 9 recommends (1) ensuring that one uses only fully supported web browsers, (2) using domain name system (DNS) filtering service, (3) maintaining and enforcing network-based URL filters, (4) restricting unauthorized or unnecessary email and b...