Answer & Explanation:KEY NOTES:The Case Study is attachedThe Assignment Details listed below are also a separate attachmentThe working draft is attached. The areas that need editing are ALL areas but the Government Regulation Section.Project
#2 Detailed Assignment Description
Assignment:
Using the case study (attached) and NIST SP 800-53, Identify and prioritize
IT Security controls that should be implemented. Discuss any applicable US
Government regulations/standards that apply to this organization.
Step 1: Review the selected case study and describe at
least10 issues related to security, interoperability, and operations.
Step 2: Prioritize and articulate the selected requirements
based on immediate need, security posture, complexity, resource availability,
and cost.
Step 3: Identify at least 4 applicable government
regulations/ standards that govern how the requirements must be met, implemented,
or measured. Provide rationale for why these are applicable.
Step 4: Using NIST Special Publication 800-53 select at
least 4 security controls that relate to these issues and describe how these
controls enhance the security posture or facilitates the secure implementation
of these requirements.
Format:
The deliverable for this case study assignment will be a minimum 5 page,
double-spaced paper using Times New Roman 12 font and APA style formatting for
citations and references. It will also include a minimum of 5 references. The
Title/Cover page, illustrations (tables/charts/graphs), or references are not
part of the page count but are required for the assignment. The grading rubric
provides additional details as to what should be included in the paper. Your
instructor may provide an APA style template to use for
this paper.
Grading Rubric
Issues 10 points
·
Identifies at least 10 issues based on the case
study.
Relationship 12 points
·
Clearly describes and relates issues to
security, interoperability and operations
Prioritization 12 points
·
Clearly prioritizes and articulates the issues
as requirements based on immediate need, security posture, complexity, resource
availability and cost.
ID Applicable Government Documents 5
points
·
Identifies at least 4 government regulations and
standards.
Rationale Used 12 points
·
Clearly identifies applicable government
regulations and standards that govern how the requirements must be met,
implemented or measured. Must provide the rationale for selecting the
documents.
Cites Regulations and Standards 5
points
·
Clearly cites all government regulations and
standards used.
Defines Controls 12 points
·
Identifies at least 4 appropriate NIST controls
and links them to each issue using logic.
Rationale for Control 12 points
·
Clear and detailed rationale as to how those
controls mitigate the risk identified.
Use of Authoritative Sources5 points
·
Used at least 5 authoritative or scholarly
sources in paper. One must be NIST SP 800-53. No APA style errors in sources.
Citation of Sources 5 points
·
All sources cited. No errors in citing material
in paper.
Formatting 5 points
·
Prepared MS Word document, used consistent
formatting, section subheadings, submitted one file, used instructor provided
template, correct coversheet and separate reference page and meets minimum page
count.
Grammar and Punctuation 5 points
·
No grammar, use of first/second person, spelling
or punctuation errors.
project_2_security_control_reqs_draft.docx