CSIA 485
Project 2: Implementation Plan
Top of Form
|
Hide Assignment Information |
||||||
|
Instructions |
|
|||||
|
Download the attached detailed assignment description for this project. You should also review the rubric shown below for additional information about the requirements for the project and how your work will be graded. Please make sure that you use both the assignment description file AND the rubric when completing your work. |
||||||
|
|
|
|||||
|
Due on Jul 23, 2024 11:59 PM |
||||||
|
Attachments |
|
|||||
|
Hide Rubrics
Rubric Name: Project #2 Implementation Plan
|
Criteria |
Excellent |
Outstanding |
Acceptable |
Needs Improvement |
Needs Significant Improvement |
Missing or Unacceptable |
Criterion Score |
|
Business Context / Use of Scenario |
10 points Implementation plan clearly, concisely, and accurately incorporated information about the designated business context and scenario information as presented in the course readings. No evidence present indicating use of previous course scenarios. |
8 points Implementation plan clearly and accurately incorporated information about the designated business context and scenario information as presented in the course readings. No evidence present indicating use of previous course scenarios. |
7 points Implementation plan accurately incorporated information about the designated business context and scenario information as presented in the course readings. No evidence present indicating use of previous course scenarios. |
4 points Implementation plan used relevant information from the designated business context and scenario as presented in the course readings. |
2 points Deliverable used some information related to the designated company or industry. |
0 points Deliverable did not incorporate information from the designated business context / scenario as presented in the course readings. |
Score of Business Context / Use of Scenario, / 10 |
|
Introduction or Overview for the Implementation Plan for Security Strategy (for Designated Company) |
10 points Provided an excellent overview of the implementation plan. The introduction was clear, concise, and accurate. Writer appropriately used information from 3 or more authoritative sources |
8 points Provided an outstanding overview of the implementation plan. The introduction was clear and accurate. Writer appropriately used information from at least 2 authoritative sources |
7 points Provided an acceptable overview of the implementation plan. Writer appropriately used information from authoritative sources |
6 points Provided an overview but the section lacked important details. Information from authoritative sources was cited and used in the overview. |
4 points Attempted to provide an introduction to the implementation plan but this section lacked detail, was off topic, and/or was not well supported by information drawn from authoritative sources. |
0 points The introduction and/or overview sections of the paper were missing. |
Score of Introduction or Overview for the Implementation Plan for Security Strategy (for Designated Company), / 10 |
|
Goals & Objectives for Implementation Plan (for Designated Company) |
10 points Clearly identified (a) 3 or more business goals and objectives and (b) 3 or more project goals and objectives. Explanation of goals established the relationship between the security strategy for the designated company (project #1) and this project. Goals and objectives were stated in a clear, concise, and accurate manner. Appropriately used information from 3 or more authoritative sources. |
8 points Clearly identified (a) 2 or more business goals and objectives and (b) 2 or more project goals and objectives. Explanation of goals established the relationship between the security strategy for the designated company (project #1) and this project. Goals and objectives were stated in a clear and accurate manner. Appropriately used information from 3 or more authoritative sources. |
7 points Clearly identified (a) 1 or more business goals and objectives and (b) 1 or more project goals and objectives. Explanation of goals established the relationship between the security strategy for the designated company (project #1) and this project. Appropriately used information from 3 or more authoritative sources. |
6 points Provided a discussion about goals and objectives for the implementation plan. Information from authoritative sources was cited and used. |
4 points Attempted to provide information about goals and objectives for the plan. The discussion was significantly lacking in detail and/or was not well supported by information drawn from authoritative sources. |
0 points This section was missing, off topic, or failed to provide relevant information. |
Score of Goals & Objectives for Implementation Plan (for Designated Company), / 10 |
|
Scope, Assumptions, & Constraints for Implementation Plan (for designated company) |
15 points Provided an excellent analysis of the scope for the implementation project (including explanation of items that are beyond the scope). Clearly and concisely listed 6 or more assumptions (2), constraints (2), and barriers to success (2). Appropriately used information from 3 or more authoritative sources. |
13.5 points Provided an outstanding analysis of the scope for the implementation project (including explanation of items that are beyond the scope). Clearly and concisely listed 5 or more assumptions, constraints, and barriers to success (at least one item in each category). Appropriately used information from 3 or more authoritative sources. |
12 points Provided an acceptable analysis of the scope for the implementation project (including explanation of items that are beyond the scope). Clearly and concisely listed 3 or more assumptions, constraints, and barriers to success (at least one item in each category). Appropriately used information from 3 or more authoritative sources. |
6 points Provided a discussion of the scope, assumptions, and constraints for the implementation plan for the security strategy for the designated company. Information from authoritative sources was cited and used. |
4 points Attempted to provide information about the scope, assumptions, and/or constraints for the implementation plan. The discussion was significantly lacking in detail and/or was not well supported by information drawn from authoritative sources. |
0 points This section was missing, off topic, or failed to provide relevant information. |
Score of Scope, Assumptions, & Constraints for Implementation Plan (for designated company), / 15 |
|
Project Management Plan (People, Processes, Technologies) |
15 points Provided an excellent description of the project management plan supporting implementation of the security strategy. Clearly and concisely identified and described the required management and monitoring structures using the people, processes, and technologies framework. Appropriately used information from 3 or more authoritative sources. |
13.5 points Provided an outstanding description of the project management plan supporting implementation of the security strategy. Identified the required management and monitoring structures using the people, processes, and technologies framework. Appropriately used information from 3 or more authoritative sources. |
12 points Provided an acceptable description of the project management plan for implementing the security strategy. Used the people, processes, and technologies framework. Appropriately used information from 3 or more authoritative sources. |
6 points Provided a discussion of project management actions required for implementation of the security strategy. Information from authoritative sources was cited and used. |
4 points Attempted to provide information about project management. OR, the discussion was not well supported by information from authoritative sources. |
0 points This section was missing, off topic, or failed to provide relevant information. |
Score of Project Management Plan (People, Processes, Technologies), / 15 |
|
Strategy Implementation |
15 points Provided an excellent documentation package detailing the security controls required to implement the strategy. Provided a phased implementation schedule with timeline diagram using the System Development Lifecycle (SDLC) gates/phases and including milestones and resources required for each phase (people, money). Narrative documentation was clear, concise, and accurate. Appropriately used information from 3 or more authoritative sources. |
13.5 points Provided an outstanding documentation package detailing the security controls required to implement the strategy. Provided a phased implementation schedule with timeline diagram using the System Development Lifecycle (SDLC) gates/phases and including milestones and resources required for each phase (people, money). Narrative documentation was clear and accurate. Appropriately used information from 3 or more authoritative sources. |
12 points Provided an acceptable documentation package listing the security controls required to implement the strategy. Provided a phased implementation schedule with timeline diagram that includes milestones and resources required for each phase (people, money). Provided some information about the System Development Lifecycle (SDLC). Narrative documentation was clear and easy to understand. Appropriately used information from 3 or more authoritative sources. |
6 points Provided a discussion of the actions required to implement the security strategy. Mentioned controls, schedules, resource requirements. Information from authoritative sources was cited and used. |
4 points Attempted to provide summary information about the strategy implementation but this section lacked important details. OR, the discussion was not well supported by information from authoritative sources. |
0 points This section was missing, off topic, or failed to provide relevant information. |
Score of Strategy Implementation, / 15 |
|
Enterprise IT Architecture (for the designated company) |
15 points Provided an excellent documentation package detailing the hardware, software, network infrastructure, and cybersecurity defenses required to implement the cybersecurity strategy. Narrative documentation of the architecture was clear, concise, and accurate. Provided an updated Network Diagram showing the to-be state of the IT infrastructure including all mitigating or “control” technologies (e.g. firewalls, IDPS, DMZ, etc.). Appropriately used information from 3 or more authoritative sources. |
13.5 points Provided an outstanding documentation package detailing the hardware, software, network infrastructure, and cybersecurity defenses required to implement the cybersecurity strategy. Narrative documentation of the architecture was clear and accurate. Provided an updated Network Diagram showing the to-be state of the IT infrastructure including all mitigating or “control” technologies (e.g. firewalls, IDPS, DMZ, etc.). Appropriately used information from 3 or more authoritative sources. |
12 points Provided an acceptable documentation package documenting the hardware, software, network infrastructure, and cybersecurity defenses required to implement the cybersecurity strategy. Provided an updated Network Diagram showing the to-be state of the IT infrastructure. Appropriately used information from 3 or more authoritative sources. |
6 points Provided a discussion of the recommended Enterprise IT Architecture for the designated company. Network diagram was missing or not updated to show added technologies and controls. Information from authoritative sources was cited and used. |
4 points Attempted to provide summary information about an enterprise IT architecture. OR, the discussion was not well supported by information from authoritative sources. |
0 points This section was missing, off topic, or failed to provide relevant information. |
Score of Enterprise IT Architecture (for the designated company), / 15 |
|
Professionalism: Consistent Use and Formatting for Citations and Reference List |
5 points Work contains a reference list containing entries for all cited resources. Sufficient information is provided to allow a reader to find and retrieve the cited sources. Reference list entries and in-text citations are consistently and correctly formatted using an appropriate citation style (APA, MLA, etc.). |
4 points Work contains a reference list containing entries for all cited resources. Sufficient information is provided to allow a reader to find and retrieve the cited sources. One or two inconsistencies or errors in format for in-text citations and/or reference list entries. |
3 points Work contains a reference list containing entries for all cited resources. Sufficient information is provided to allow a reader to find and retrieve the cited sources. No more than 5 inconsistencies or errors in format for in-text citations and/or reference list entries. |
2 points Work has no more than three paragraphs with omissions of citations crediting sources for facts and information. Work contains a reference list containing entries for cited resources. Work contains no more than 10 inconsistencies or errors in format. |
1 point Work attempts to credit sources but demonstrates a fundamental failure to understand and/or consistently apply a professional formatting style for the reference list and/or citations. |
0 points Reference list is missing. Work demonstrates an overall failure to incorporate and/or credit authoritative sources for information used in the paper. |
Score of Professionalism: Consistent Use and Formatting for Citations and Reference List, / 5 |
|
Professionalism: Organization, Appearance, & Execution |
5 points Submitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type. No formatting, grammar, spelling, or punctuation errors. |
4 points Submitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings. Work contains minor errors in formatting, grammar, spelling or punctuation which do not significantly impact professional appearance. |
3 points Organization and/or appearance of submitted work needs improvement. Errors in formatting, spelling, grammar, or punctuation which detract from professional appearance of the submitted work. |
2 points Submitted work has multiple significant errors in style or formatting, spelling, grammar, and/or punctuation. Work is unprofessional in appearance. Work requires substantial rewrite to improve professional appearance. |
1 point Submitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage. Work is disorganized and needs to be rewritten for readability and professional appearance. |
0 points No work submitted. |
Score of Professionalism: Organization, Appearance, & Execution, / 5 |
Total
Score of Project #2 Implementation Plan,
/ 100
Overall Score
Bottom of Form