Q1. As you are aware, electric power is vital to all aspects of all life. The 2003 Northeast blackout is an example of its criticality. Use web resources and your imagination (state the assumptions) to describe the security services dimension of a desirable IA system for a power company.

Q2. You have asked your system administrator to provide you with measures on organization’s computer system availability and failures. The administrator reports to you that there were four failures and that the availability was satisfactory. What is wrong with these metrics? Use the material provided in the metrics papers and slides to critique—don’t simply write some English sentences that anyone else could make. Instead, provide a good analytical critique using the material provided.

Q3. Using the web provide a list of ten organizations that are using CVSS to classify/quantify the potential effect of vulnerabilities on their information systems.