Benchmark – Impact Analysis Part 1

tukaz2005

3.1assignmentonly.docx

Home >Computer Science homework help > Benchmark – Impact Analysis Part 1

Directions: This assignment will be completed throughout the course.

Benchmark – Impact Analysis Part 1: Information Acquisition

3.1: Examine the laws, regulations, and standards that organizations use to align with government requirements around cybersecurity best practices within their industry.

Select an industry of your choice and review its compliance requirements. Then, using a fictitious company that is just starting out, identify the essential elements of what is required to attain compliance or successful cybersecurity resilience. Within a report to the CIO, present this information from a legal standpoint making sure to address the following:

1. Identify any industry specific compliances that must be met (i.e., HIPAA, COPPA, DOD). Determine what overarching guidance they must comply with. Determine what overarching laws they must comply with.

2. Examine the requisite set of standards, frameworks, policies, and best practices most helpful in the development and implementation of the organizations objectives.

3. Identify the organization's critical data infrastructure assets (i.e., network, telecom, utilities, applications, computers, and client data categories).

4. Identify human resources for technical, management and legal operations.

5. Identify requisite law enforcement entities required for reporting breaches to (i.e., local, state, and federal areas of compliance).

Performance Level Ratings

Meets Expectations

Performance consistently met expectations in all essential areas of the assignment criteria, at times possibly exceeding expectations, and the quality of work overall was very good. The most critical goals were met.

Near Expectations

Performance did not consistently meet expectations. Performance failed to meet expectations in one or more essential areas of the assignment criteria, one or more of the most critical goals were not met.

Below Expectations

Performance was consistently below expectations in most essential areas of the assignment criteria, reasonable progress toward critical goals was not made. Significant improvement is needed in one or more important areas.

Criteria	Below Expectations	Near Expectations	Meets Expectations	Earned
*3.1: Examine the laws, regulations, and standards that organizations use to align with government requirements around cybersecurity best practices within their industry.*
The student accurately identifies industry specific compliances that must be met.	0 pts – 2 pts	3 pts – 4 pts	5 pts
The student accurately determines overarching guidance that must be complied with.	0 pts – 2 pts	3 pts – 4 pts	5 pts
The student accurately determines overarching laws that must be complied with.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student comprehensively presents the standards most helpful in the development and implementation of the organizations objectives.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student accurately examines the frameworks most helpful in the development and implementation of the organizations objectives.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student comprehensively presents the policies most helpful in the development and implementation of the organizations objectives.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student comprehensively presents the best practices most helpful in the development and implementation of the organizations objectives.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student accurately identifies the organization's critical data infrastructure assets.	0 pts – 6 pts	7 pts – 9 pts	10 pts
The student comprehensively identifies human resources for technical operations	0 pts – 2 pts	3 pts – 4 pts	5 pts
The student comprehensively identifies human resources for management operations	0 pts – 2 pts	3 pts – 4 pts	5 pts
The student comprehensively identifies human resources for legal operations	0 pts – 2 pts	3 pts – 4 pts	5 pts
The student comprehensively identifies requisite law enforcement entities required for reporting breaches to.	0 pts – 2 pts	3 pts – 4 pts	5 pts
Industry standard technical writing is correct and utilized throughout.	0 pts – 6 pts	7 pts – 9 pts	10 pts
TOTAL				/100
Instructor Feedback