Task 1:
1a. Before setting up a secure system, identification of the risk is the main important part. It also helps us to identify the major requirements and also prioritizing the information. As per the scenario, the five most electronically held information assets related to Welcombe Learning Partnership are mentioned below:
- Students record data
- Staffs personal data
- Emails
- Financial Records
- Networking Resources b,c. The security threats can which could affect the confidentiality, integrity and the availability of Welcombe Learning Partnership are shown in the table mentioned below: Asset (a) Threat (b) CIA? (b) Likelihood (c) Impact (c) Risk (d)
Students record data Data loss C Medium Medium High Lack of data backup A Low Low Very Low …show more content…
So the system must have access control along with authentication and authorization.
Data and Hardware Backup:
Since, data are the most valuable assets, it must be backup regularly. Many reasons like natural calamities, server failure, system reboot may after the data and data might be lost. So to prevent this data must be backup along with the hardware to minimize the risk of system failures.

b. The process of making a readable plain text into a cypher text using algorithms, keys is known as encryption. It’s used to protect the data from unauthorized person. Sending data from the internet is not so safe and it can be compromised and hacker or other people may get the information so encryption is necessary. Since the data is encrypted, only the authorized person who have the key can read the data.
In this scenario, we can use the encryption method in protecting sensitive data such as, staff’s personal data, student’s records, financial documents and records and so on. The encryption algorithm or protocol that I recommend are described below:
SSL (Secure Socket