Protecting Information

Protecting Information Using Cryptography and Encryption
The use of encryption to protect systems and information is wide-spread within the IT industry. In NIST SP 800-53, security controls address the implementation of cryptographic protection mechanisms including the generation and management of cryptographic keys, the use of encryption to protect information at rest and in motion, and the selection of hardware and software modules to implement cryptographic algorithms. Specific security controls related to cryptography and encryption are found in the Access Control family, System Integrity family, and System and Communications Protection families of security controls.
For this discussion, you are asked to prepare:
• A short management brief (background paper) for technical and non-technical staff members on the subject of protecting information using encryption and trustworthy cryptographic algorithms.
• You should also address non-repudiation and how the sources and contents of important documents can and should be authenticated using digital signatures and hashing.
This background paper will be distributed to employees attending a mandatory half-day training session for their annual information security training.
Remember to use and cite authoritative sources in your work. Place your list of references at the end of your paper.
Your post will be checked by Turnitin. Strive for a Turnitin score of 15% or less after filtering for quotations and references. Higher Turnitin scores alert the professor to review the file for academic integrity.
Week 6 Readings
(I have not attached the files. Let me know if you do not have them and want me to send you the readings)
• Chapter 7 in the (ISC2) SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Ed.
• Review Section 3.19 System and Information Integrity (especially SI-6 and SI-7) in
• NIST SP 800-53 rev 5.
• Review Section 3.18 System and Communications Protection (pay special attention to controls: SC-8, SC-12, SC-13, SC-16, SC-17, SC-20) in NIST SP 800-53 rev 5.
• Review Section 3.1 Access Control (pay special attention to controls: AC-3, AC-6, AC-16, AC-17) in NIST SP 800-53 rev 5.