The purpose of the final report, presentation, and peer review is to reinforce o
Place your order now for a similar assignment and have exceptional work written by our team of experts, At affordable rates
For This or a Similar Paper Click To Order Now
The purpose of the final report, presentation, and peer review is to reinforce one of the stated outcomes for this program:
Program Outcome 13: Engage in professional collaboration and communication with technical and nontechnical stakeholders on issues related to security.
For this report and presentation, I want you to focus on communicating with technical stakeholders, and for the peer review, I want you to focus on elements of professional collaboration.
Instructions
Consider this final report to be an artifact that you could showcase to a prospective employer. It is intended that you work on your final report and make it as finalized as possible. You’ll then present your work to your peers, gather feedback, and incorporate any relevant feedback you receive.
As a starting point, use the the set of documents Download the set of documentsdetailing the security policies, standards, procedures, and guidelines for the Oklahoma University Health Sciences Center. No other organizations are to be used for this final report.
Your final report should be structured in the following way:
Background: Provide your audience with background information.What industry is this organization in?
What are its security challenges?
What are the organization’s security priorities?
Does this organization have to handle sensitive data like PII, credit card, financial, or government data?
Starting State: Summarize the starting state of security policies, standards, procedures, and guidelines for the OUHSC organization.
Finalized Milestones: Submit the final versions of your milestones. Consider this a professional document in the way it looks and the style of writing.
Milestone Summary: For each milestone, devote a section that summarizes the following items. Note: This will help inform your presentation.
Goals
Findings
Challenges
Lessons learned
Changes made since initially submitting the milestone document
Project Conclusion: Reflect on what you learned about the process of revising your starting security policies, standards, procedures, and guidelines. Note: Being reflective is an important part of transferring information into your long-term memory.
Evaluation
TIP Refer to the grading rubric attached to this assignment for further details on how your final report will be evaluated by the instructor.
Submit your work by the due date in the course calendar.
Rubric
Final Report Rubric
Final Report Rubric
CriteriaRatingsPts
This criterion is linked to a Learning OutcomeBackgroundDescription of the organization and its security challenges and priorities; description of sensitive data
10 to >7.0 ptsMeets Expectations
Realistic description of the organization, its security challenges and priorities, and sensitive data it has to handle
7 to >3.0 ptsPartially Meets Expectations
Mostly realistic description of the organization, its security challenges and priorities, and sensitive data it has to handle
3 to >0 ptsDoes Not Meet Expectations
Description of the organization and its security stance is not realistic or not consistent, or incomplete description of sensitive data it has to handle
10 pts
This criterion is linked to a Learning OutcomeStarting State SummarySummary of starting state of security policies, standards, procedures, and guidelines
10 to >7.0 ptsMeets Expectations
Credible summary of the state of security policies, standards, procedures, and guidelines for the organization
7 to >3.0 ptsPartially Meets Expectations
Mostly consistent summary of the state of security policies, standards, procedures, and guidelines for the organization
3 to >0 ptsDoes Not Meet Expectations
Summary of the starting state of the organization’s security policies, standards, procedures, and guidelines is not credible or not consistent
10 pts
This criterion is linked to a Learning OutcomeMilestone 1: Threat ModelingOutcome of threat modeling exercise along with updates
10 to >7.0 ptsMeets Expectations
Threat modeling exercise and updates cover most of the relevant and likely threats
7 to >3.0 ptsPartially Meets Expectations
Threat modeling exercise and updates cover some but not all of the likely threats
3 to >0 ptsDoes Not Meet Expectations
Both threat modeling exercise and updates miss some of the most likely threats
10 pts
This criterion is linked to a Learning OutcomeMilestone 2: Security PolicyChanges to security policy along with updates
10 to >7.0 ptsMeets Expectations
Proposed changes to the security policies likely to be an adequate response as required by regulations or industry standards
7 to >3.0 ptsPartially Meets Expectations
Proposed changes to the security policies a good start but unlikely to be adequate when viewed by regulations or industry standards
3 to >0 ptsDoes Not Meet Expectations
Proposed changes to the security policies inadequate for regulations or industry standards
10 pts
This criterion is linked to a Learning OutcomeMilestone 3: Policy ImplementationChanges to policy implementation and updates
15 to >10.0 ptsMeets Expectations
Proposed policy implementation changes for existing security policies or new policies in line with industry standards
10 to >5.0 ptsPartially Meets Expectations
Proposed changes to implement existing security policies or new policies mostly in line with industry standards but miss some important ones
5 to >0 ptsDoes Not Meet Expectations
Proposed implementation changes not in line with industry standards
15 pts
This criterion is linked to a Learning OutcomeMilestone 4: Audit ComplianceAudit for compliance and updates
10 to >7.0 ptsMeets Expectations
Audit for compliance covers the most relevant aspects expected in regulations or industry standards
7 to >3.0 ptsPartially Meets Expectations
Audit for compliance covers some relevant aspects expected in regulations or industry standards
3 to >0 ptsDoes Not Meet Expectations
Audit for compliance misses the most relevant aspects expected in regulations or industry standards
10 pts
This criterion is linked to a Learning OutcomeMilestone 5: IT Infrastructure ChangesSecurity changes for new IT infrastructure
15 to >10.0 ptsMeets Expectations
Potential changes in future IT infrastructure are likely for the organization and the new policies and procedures are appropriate
10 to >5.0 ptsPartially Meets Expectations
Some of the potential changes in IT infrastructure are likely; some but not all of the new policies and procedures are appropriate
5 to >0 ptsDoes Not Meet Expectations
Presentation misses some of the most likely future IT infrastructure changes; many of the policies and procedures are not appropriate
15 pts
This criterion is linked to a Learning OutcomeConclusionsLearning from the project; learning from security policy, standard, procedure, and guideline revisions; response to suggestions for improvement from the peer review; topics and aspects of the project that could be improved
15 to >10.0 ptsMeets Expectations
Conclusions reflect detailed examination of lessons learned and consideration of feedback and possible improvements
10 to >5.0 ptsPartially Meets Expectations
Conclusions reflect moderately good examination of lessons learned and consideration of feedback and possible improvements
5 to >0 ptsDoes Not Meet Expectations
Conclusions do not reflect substantial examination of lessons learned, consideration of feedback, or potential improvements
15 pts
This criterion is linked to a Learning OutcomeProfessional Communication
5 to >3.0 ptsMeets Expectations
Professional vocabulary, writing style, grammar, and spelling
3 to >1.0 ptsPartially Meets Expectations
Mostly professional vocabulary, writing style, grammar, and spelling
1 to >0 ptsDoes Not Meet Expectations
Needs substantial work to reach a professional level of vocabulary, style, grammar, and spelling
5 pts
Total Points: 100
PreviousNext
