Propose and defend a topic for your final project.  Write  500 words or more explaining why this topic is important for your peers to understand. Be focused and specific. Look into the general topic provided in the list in this folder to find something new and interesting to write about. You should do a deep dive into a topic. Do not do a survey. Make use of academic rederences such as you can find in the Danforth LIbrary research databases ( https://www.nec.edu/students-faculty-staff/library-danforth/research-help/databases-help/ )

Use at least five sources. Include at least 3 quotes from your sources enclosed in quotation marks and cited in-line by reference to your reference list.  Example: “words you copied” (citation) These quotes should be one full sentence not altered or paraphrased. Cite your sources.

Copying without attribution or the use of spinbot or other word substitution software will result in a grade of 0. 

Write in essay format not in bulleted, numbered or other list format. 

Do not use attachments as a submission. 

Respond helpfully to two classmates’ posting in a paragraph of at least five sentences by asking questions, reflecting on your own experience, challenging assumptions, pointing out something new you learned, offering suggestions. WRite to help them focus and say something that you think would help them say something that would be valuable.    You should make your initial post by Thursday evening so your classmates have an opportunity to respond before Sunday.at midnight when all three posts are due. 

Final Project Topics

1. Database security compliance with  anti-money laundering statutes
    
2. Risks of overly privileged users
    
3. Auditing v. monitoring
    
4. Maintaining data integrity with hash functions
    
5. Security risks in database migration
    
6. Quantitative risk assessment methodologies
    
7. Qualitative risk assessment methodologies
    
8. Reducing costs with tiered storage
    
9. Physical protections for your database
    
10.  IOT threats to database security
     
11.  TDE
     
12.  Tokenization 
     
13.  Global data Integrity violation examples
     
14.  Efficient disaster recovery
     
15.  How to effect litigation holds
     
16.  Data as evidence: what is chain of custody?
     
17.  Data as evidence: The Federal Rules of Civil Procedure
     
18.  GDPR Compliance
     
19.  HIPAA Compliance
     
20.  SOX Compliance
     
21.   Database STIGs
     
22.  ISO Database Security Framework
     
23.  NIST Database Security Framework
     
24.  Patch management and the medical device
     
25.  Strict Liability v. Ordinary Negligence for the DBA
     
26.  How Oracle 12c advances the security discussion
     
27.  How Stuxnet exposed the exceptional importance of data integrity
     
28.  Are Data integrity violations worse than confidentiality breaches?
     
29.  How the tsunami of data expansion increases security concerns
     
30.  Mobile users and data security
     
31.  Why is vulnerability assessment critical for data security?
     
32.  Legitimate privilege abuse ad how to prevent it
     
33.  Monitoring your most highly privileged users – what the regulations say.
     
34.  Creating a database security culture
     
35.  Vulnerable storage media?
     
36.  Patching – To automate or not?
     
37.  What do you have – inventorying your legacy data.
     
38.  The human factor – how to keep your DBA up-to-date
     
39.  Monitoring database use patterns to detect anomalies
     
40.  Quantitative v. Qualitative security risk assessment
     
41. Safe Harbor under HIPAA