Think about the security environment in which organizations must op...

Think about the security environment in which organizations must operate. It is also intended to have you begin to think about some of the wide-ranging activities that prevent or mitigate security damage.
Suppose that you are in charge of Information Security at Henry Winser Insurance (H.W.I.), an insurance services company. Here are characteristics of H.W.I.
Operates 24/7 internationally
• Provides consumers and businesses insurance needs (Note: not reinsurance)
• Provides insurance services electronically, including advice, claims, payments and sales.
• Provides Web-based and Mobile APP access to information which includes customers’ accounts, claim history, policy information
• Provides extensive specialized, proprietary insurance advice. The advice is of various types (e.g., geographic considerations) and is supplied electronically by partners to H.W.I.
• H.W.I uses Machine Learning (ML) for chat bots, market analysis, modeling risk and appropriate policy analytics. (For example, monitoring drivers, individual health data or high value asset reporting systems.)
• Offers the ability for customers to engage with an insurance consultant from, around the world
• Hybrid Cloud deployment model for operations
• Many of H.W.I. internal applications recently have been reimagined from monolithic architecture to microservices architecture
Part (i)
List what you consider the four most important, prioritized service/system security threats to H.W.I. (no more), together with a summary of organizational and technical responses, in the form below. Justify why you consider these the most important threats for H.W.I. in particular. Include at least two threat types not mentioned in the online module for week 1. If you wish, you may make additional assumptions about the manner in which H.W.I. does business; but be sure to describe them in that case at the start of your assignment.
a) Title
b) Description of security threat
c) Justification for inclusion with emphasis on risk and potential damage
d) Organizational response
e) Technical response
Avoid generic responses. For example, if you believe that an issue concerning viruses should be in your top list of threats to H.W.I., inform us to why you have made this choice in the context of the scenario. Take into account, the kinds of threat actors who may be enablers of security failures and explain, if relevant, their under lying interest in H.W.I.’s business.
Part (ii)
- Compare the severity of the four threats you selected with each other
- List two additional threats that you considered during your analysis in Part (i) but determined that they were less important than those that you selected.