Answer & Explanation:Question 1.Compare / Contrast the ENISA and Commonwealth Approaches to Developing National Cybersecurity StrategiesScenario: Your company has assigned you to serve as an industry subject matter expert and advisor for a cyber policy competition team for a local university. This year, the team will be competing in an international Cyber Policy competition in Washington, DC. The policy question for this years competition is: what is the best approach for developing a national cybersecurity strategy? The competition will have one U.S. team and nine additional teams from Europe (4 teams) and the Commonwealth nations (5 teams). The university students have asked you to help them understand the problem space and the likely approaches that competing teams will take. To accomplish this goal, you have decided to prepare a white paper in which you compare the European Union Agency for Network and Information Security (ENISA) guidance document for cybersecurity strategies to a similar document prepared by the Commonwealth Telecommunications Organization (CTO). ENISA provides cybersecurity guidance for member states of the European Union (http://europa.eu/index_en.htm ). CTO provides cybersecurity guidance for members of the Commonwealth of Nations (http://www.commonwealthofnations.org/). Your starting point for your analysis will be outlines of the two documents (Table 1 and Table 2) which were provided to the teams by the competitions organizers. Research:1.Review the document outlines provided in Tables 1 and 2 (at the end of this document). 2.Download and review the full documentsa. CTO: http://www.cto.int/media/fo-th/cyb-sec/Commonwealth%20Approach%20for%20National%20Cybersecurity%20Strategies.pdfb.ENISA: https://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/national-cyber-security-strategies-an-implementation-guide/at_download/fullReport3.Develop five or more points which are common across the two documents. (Similarities)4.Identify and review at least three unique items in each document. (Differences)5.Research three or more national cybersecurity strategies from EU or Commonwealth nations which were written in or available in English (see the list in Appendix 1 of the CTO document). How comprehensive are these documents when compared to either the ENISA or the CTO guidance? From these documents and the ENISA / CTO guidelines, develop an answer to the question: Why should every nation have a cybersecurity strategy?Write:Write a five (5) to eight (8) page white paper in which you summarize your research and discuss the similarities and differences between the two guidance documents. You should focus upon clarity and conciseness more than length when determining what content to include in your paper. At a minimum, your white paper must include the following:1.An introduction or overview of national cybersecurity strategies. Explain the purpose of a national cybersecurity strategy and how it is used. Answer the question: why should every nation have a cybersecurity strategy? (Make sure that you address the importance of such strategies to small, resource-poor nations as well as to wealthy, developed nations.)2.A separate section in which you discuss the common principles and guidelines (similarities) found in both guidance documents (ENISA & CTO). 3.A separate section in which you discuss the unique aspects of the CTO principles and guidelines for national cybersecurity strategies.4.A separate section in which you discuss the unique aspects of the ENISA principles and guidelines for national cybersecurity strategies.5.A section in which you present your recommendations to the competition team as to the approach (next steps) they should take in further refining their answer to the competition question: what is the best approach for developing a national cybersecurity strategy? Submit For Grading 1.Submit your white paper in MS Word format (.docx or .doc file) using the OPEN Data Assignment in your assignment folder. (Attach the file.)2.You must also submit your white paper to TurnItIn before the due date for this assignment.Additional Information1.Your white paper should use standard terms and definitions for cybersecurity concepts. The following sources are recommended:a.ISACA Glossary http://www.isaca.org/pages/glossary.aspx b.Guidelines on Security and Privacy in Public Cloud Computing http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-144.pdf c. Glossary sections in the two guidance documents (ENISA & CTO)2.You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must comply with APA 6th edition Style requirements. Failure to credit your sources will result in penalties as provided for under the universitys Academic Integrity policy. 3.Use APA 6th edition style (formatting) for the organization and appearance of the MS Word document that you submit to your assignment folder. This includes margins, section headings, and consistent use of fonts (Times New Roman 12 in black), paragraph styles (first line indent by ½ inch), and line spacing (double). Formatting requirements and examples are found under Course Resources > APA Resources. Your file should contain both a title page and a separate References page. Use page breaks to ensure that the title page and references page are separate from the body of the paper. 4.You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. These items are graded under Professionalism and constitute 15% of the assignment grade. Table 1. Outline for Commonwealth Approach for Developing National Cybersecurity Strategies (Commonwealth Telecommunications Organisation, 2015).3 CREATING AND USING A NATIONAL CYBERSECURITY STRATEGY3.1 Development of the Strategy3.1.1 An approach to design of the strategy: risk-based and outcome-focused3.1.2 The use of a maturity model3.1.3 Key performance indicators3.1.4 Resources and market forces3.1.5 Communicating its concepts and ideas3.2 Delivering the Strategy3.3 Reviewing the Strategy4 KEY ELEMENTS OF A CYBERSECURITY STRATEGY4.1 Introduction and background section4.2 Guiding principles section4.3 Vision and strategic goals section4.4 Objectives and priorities section using a risk-based approach4.5 Stakeholder section4.6 Governance and management structure4.7 Strategy implementation section4.7.1 Legal and regulatory framework4.7.2 Capacity Building4.7.3 Awareness4.7.4 Local technical capability4.7.5 Incident response4.8 Monitoring and evaluationTable 2. Outline for National Cyber Security Strategies: Practical Guide on Development and Execution (European Network and Information Security Agency, 2012).2 National cyber security strategy lifecycle3 Develop and execute the national cyber-security strategy 3.1 Set the vision, scope, objectives and priorities3.2 Follow a national risk assessment approach3.3 Take stock of existing policies, regulations and capabilities3.4 Develop a clear governance structure 3.5 Identify and engage stakeholders 3.6 Establish trusted information-sharing mechanisms3.7 Develop national cyber contingency plans3.8 Organise cyber security exercises3.9 Establish baseline security requirements 3.10 Establish incident reporting mechanisms3.11 User awareness 3.12 Foster R&D3.13 Strengthen training and educational programmes3.14 Establish an incident response capability 3.15 Address cyber crime 3.16 Engage in international cooperation 3.17 Establish a publicprivate partnership3.18 Balance security with privacy 4 Evaluate and adjust the national cyber-security strategy 4.1 Evaluation approach 4.2 Key performance indicatorsReferences:Commonwealth Telecommunications Organisation. (2015). Commonwealth approach for developing national cybersecurity strategies. London, UK: Author. Retrieved from http://www.cto.int/media/fo-th/cyb-sec/Commonwealth%20Approach%20for%20National%20Cybersecurity%20Strategies.pdf European Network and Information Security Agency. (2012). National cyber security strategies: Practical guide on development and execution. Heraklion, Crete, Greece: Author. Retrieved from https://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/national-cyber-security-strategies-an-implementation-guide/at_download/fullReportRubric Name: Paper #4: Compare / Contrast Cybersecurity Strategy Guidance (Rubric)CriteriaExcellentOutstandingAcceptableNeeds ImprovementNeeds Significant ImprovementMissing or UnacceptableIntroduction or Overview for National Cybersecurity Strategies15 pointsProvided an excellent introduction or overview of national cybersecurity strategies. Explained the purpose of a national cybersecurity strategy and how it is used. Fully answered the question: why should every nation have a cybersecurity strategy? Addressed the importance of such strategies to small, resource-poor nations as well as to wealthy, developed nations. The overview appropriately used information from 3 or more authoritative sources.14 pointsProvided an outstanding introduction or overview of national cybersecurity strategies. Explained the purpose of a national cybersecurity strategy and how it is used. Addressed the question: why should every nation have a cybersecurity strategy? Addressed the importance of such strategies to small, resource-poor nations as well as to wealthy, developed nations. The overview appropriately used information from 2 or more authoritative sources.13 pointsIntroduced national cybersecurity strategies; explained the purpose of a national cybersecurity strategy and how it is used. Addressed the question: why should every nation have a cybersecurity strategy? Mentioned the importance of such strategies to small, resource-poor nations as well as to wealthy, developed nations. The overview appropriately used information from 1 or more authoritative sources.11 pointsProvided an overview but the section lacked important details about national cybersecurity strategies. Information from authoritative sources was cited and used in the overview.4 pointsAttempted to provide an introduction to the paper but this section lacked detail and/or was not well supported by information drawn from authoritative sources. 0 pointsThe introduction and/or overview sections of the paper were off topic. Common Principles / Guidance (CTO, ENISA)15 pointsProvided an excellent discussion of the common principles and guidelines (similarities) found in both guidance documents (ENISA & CTO). Provided 5 or more specific examples of content which was similar between the two documents. Appropriately used information from 3 or more authoritative sources.14 pointsProvided an
outstanding discussion of the common principles and guidelines (similarities) found in both guidance documents (ENISA & CTO). Provided 4 or more specific examples of content which was similar between the two documents. Appropriately used information from 2 or more authoritative sources. 13 pointsProvided a discussion of the common principles and guidelines (similarities) found in both guidance documents (ENISA & CTO). Provided 3 or more specific examples of content which was similar between the two documents. Appropriately used information from 1 or more authoritative sources.11 pointsProvided a discussion of similarities between the two documents including at least two examples. Appropriately used information from authoritative sources.4 pointsProvided a discussion of similarities between the two documents including at least one example. The discussionlacked detail and/or was not well supported by information drawn from authoritative sources.0 pointsThis section was missing, off topic, or failed to provide information about similarities in the two documents (CTO, ENISA).Unique Aspects of CTO Guidance15 pointsProvided an excellent discussion of the unique aspects of the CTO principles and guidelines for national cybersecurity strategies. Provided 5 or more examples of specific principles or guidelines or other content which were unique to the CTO guidance. Appropriately used information from 3 or more authoritative sources.14 pointsProvided an outstanding discussion of the unique aspects of the CTO principles and guidelines for national cybersecurity strategies. Provided 4 or more examples of specific principles or guidelines or other content which were unique to the CTO guidance. Appropriately used information from 2 or more authoritative sources.13 pointsProvided a discussion of the unique aspects of the CTO principles and guidelines for national cybersecurity strategies. Provided 3 or more examples of specific principles or guidelines or other content which were unique to the CTO guidance. Appropriately used information from 1 or more authoritative sources.11 pointsProvided a discussion ofthe unique aspects of the CTO principles and guidelines for national cybersecurity strategies. Named three or more specific principles or guidelines or other content which were unique to the CTO guidance. Appropriately used information from authoritative sources.4 pointsProvided a discussion of the unique aspects of the CTO guidance document. The discussion lacked detail and/or was not well supported by information drawn from authoritative sources.0 pointsThis section was missing, off topic, or failed to provide information aboutunique aspects of the CTO guidance document.Unique Aspects of ENISA Guidance15 pointsProvided an excellent discussion of the unique aspects of the ENISA principles and guidelines for national cybersecurity strategies. Provided 5 or more examples of specific principles or guidelines or other content which were unique to the ENISA guidance. Appropriately used information from 3 or more authoritative sources.14 pointsProvided an outstanding discussion of the unique aspects of the ENISA principles and guidelines for national cybersecurity strategies. Provided 4 or more examples of specific principles or guidelines or other content which were unique to the ENISA guidance. Appropriately used information from 2 or more authoritative sources.13 pointsProvided a discussion of the unique aspects of the ENISA principles and guidelines for national cybersecurity strategies. Provided 3 or more examples of specific principles or guidelines or other content which were unique to the ENISA guidance. Appropriately used information from 1 or more authoritative sources.11 pointsProvided a discussion ofthe unique aspects of the ENISA principles and guidelines for national cybersecurity strategies. Named three or more specific principles or guidelines or other content which were unique to the ENISA guidance. Appropriately used information from authoritative sources.4 pointsProvided a discussion of the unique aspects of the ENISA guidance document. The discussion lacked detail and/or was not well supported by information drawn from authoritative sources.0 pointsThis section was missing, off topic, or failed to provide information aboutunique aspects of the ENISA guidance document.Recommendations for Best Approach (Next Steps)10 pointsProvided an excellent summary of best practice recommendations for national cybersecurity strategy development. Recommended 5 or more appropriate next steps to help the competition team prepare to answer the question: what is the best approach for developing a national cybersecurity strategy? Appropriately used information from 3 or more authoritative sources.8.5 pointsProvided an outstanding summary of best practice recommendations for national cybersecurity strategy development. Recommended 3 or more appropriate next steps to help the competition team prepare to answer the question: what is the best approach for developing a national cybersecurity strategy? Appropriately used information from 2 or more authoritative sources.7 pointsProvided a summary of best practice recommendations for national cybersecurity strategy development. Recommended at least one appropriate next step to help the competition team prepare to answer the question: what is the best approach for developing a national cybersecurity strategy?Appropriately used information from 1 or more authoritative sources.6 pointsDiscussion provided some information about best practices for developing national cybersecurity strategies. Mentioned information obtained from authoritative sources.4 pointsDiscussion provided some information about best practices for national cybersecurity strategies, but the lacked detail and/or was not supported by information from authoritative sources.0 pointsDid not address best practices for national cybersecurity strategies.Addressed security issues using standard cybersecurity terminology5 pointsDemonstrated excellence in the integration of standard cybersecurity terminology into the case study.4 pointsProvided an outstanding integration of standard cybersecurity terminology into the case study.3 pointsIntegrated standard cybersecurity terminology into the into the case study2 pointsUsed standard cybersecurity terminology but this usage was not well integrated with the discussion.1 pointMisused standard cybersecurity terminology.0 pointsDid not integrate standard cybersecurity terminology into the discussion.APA Formatting for Citations and Reference List5 pointsWork contains a reference list containing entries for all cited resources. Reference list entries and in-text citations are correctly formatted using the appropriate APA style for each type of resource.4 pointsWork contains a reference list containing entries for all cited resources. One or two minor errors in APA format for in-text citations and/or reference list entries.3 pointsWork contains a reference list containing entries for all cited resources. No more than 3 minor errors in APA format for in-text citations and/or reference list entries.2 pointsWork has no more than three paragraphs with omissions of citations crediting sources for facts and information. Work contains a reference list containing entries for cited resources. Work contains no more than 5 minor errors in APA format for in-text citations and/or reference list entries.1 pointWork attempts to credit sources but demonstrates a fundamental failure to understand and apply the APA formatting standard as defined in the Publication Manual of the American Psychological Association (6th ed.).0 pointsReference list is missing. Work demonstrates an overall failure to incorporate and/or credit authoritative sources for information used in the paper.Professionalism Part I: Organization & Appearance5 pointsSubmitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type.4 pointsSubmitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings (per the assignments directions).3 pointsOrganization and/or appearance of submitted work could be improved through better use of fonts, color, titles, headings, etc. OR Submitted work has multiple style or formatting errors. Professional appearance could be improved.2 pointsSubmitted work has multiple style or formatting errors. Organization and professional appearance need substantial improvement.1 pointSubmitted work meets minimum requirements but has major style and formatting errors. Work is disorganized and needs to be rewritten for readability and professional appearance.0 pointsSubmitted work is poorly organized and formatted. Writing and presentation are lacking in professional style and appearance. Work does not reflect college level writing skills.Professionalism Part II: Execution15 pointsNo formatting, grammar, spelling, or punctuation errors.14 pointsWork contains minor errors in formatting, grammar, spelling or punctuation which do not significantly impact professional appearance.13 pointsErrors in formatting, spelling, grammar, or punctuation which detract from professional appearance of the submitted work.11 pointsSubmitted work has numerous errors in formatting, spelling, grammar, or punctuation. Work is unprofessional in appearance.4 pointsSubmitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage.0 pointsSubmitted work is poorly executed OR does not reflect college level work.Overall ScoreExcellent90 or moreOutstanding80 or moreAcceptable70 or moreNeeds Improvement56 or moreNeeds Significant Improvement36 or moreMissing or Unacceptable0 or moreDiscussion Question.
International Cooperation for
Cybersecurity
Actions for
International Cooperation for Cybersecurity
Prepare
a 3 to 5 paragraph briefing statement which explains why wealthy nations and
developing nations should work together to improve cybersecurity for the
globally connected networks referred to as the Internet. Your
statement should address
1.
the 3 most important
reasons why developing nations should have their own cybersecurity workforce
2.
the 3 largest risks to
wealthy nations if they do not help smaller nations train & educate a
cybersecurity workforce
3.
the role(s) that
non-governmental organizations can play in helping develop global capacity for
cybersecurity incident response
Your
audience is a group of diplomats (technical and non-technical backgrounds) who
are participating in a conference on reducing global economic risks associated
cybercrime and cyberwarfare.
Provide
in-text citations and references for 3 or more authoritative sources. Put the
reference list at the end of your posting.
If you need help getting started, visit https://www.gccs2015.com/gfce