Cyber Security Governance

1

MIS 673 Cyber Security Governance Assignment 3

Total Points: 25

Instructions 1. You may work individually or in a team of two students. 2. Access NIST Special Publications website using following link

a. Link: https://csrc.nist.gov/publications/sp

Part I (11 points). Answer all questions listed in this section 1. (1 point) Identify one NIST cyber security standard useful to support cyber

security governance in an organization. 2. (5 points) Explain how selected standard can be valuable for governance of cyber

security function. Provide good argument based on information covered in class. 3. (5 points) Summarize the standard in maximum 20 PowerPoint slides.

Part II (14 points). Answer any two of the questions listed in this section.

1. (7 points) Evaluate the selected standard (and its controls) from Part I against following criteria:

a. Strategic, b. Tactical, and c. Operational.

Explain each category and choice of controls in terms of effectiveness in governing cyber security.

2. (7 points) Review and categorize the controls provided in the selected standard from Part I in terms of following three categories:

a. Normative controls (Trust, Ethics) b. Formal (rules, policy, responsibility, integrity) c. Technical controls

You should explain whether and how these criteria are covered in the selected standard. Provide support for your position.

3. (7 points) Identify controls provided in selected standard from Part I and

categorize in following three links of the Business Model for Information Security:

a. People - Process b. Process - Technology c. Technology - People

2

You should explain whether and how these criteria are covered in the selected standard. Provide support for your position.

Deliverables You need to submit the following:

1. Written report answering questions listed in Part I & II. 2. PowerPoint slide deck for Part I – Question 3.

Specifications for the assignment

1. Maximum length of the paper = 5000 words (not including references) 2. Minimum length of the paper = 2000 words (not including references) 3. The general text of the paper, excluding headings and title, should be

written with following format specifications a. Font: Times New Roman b. Font Size: 12, regular c. Line spacing: double spaced d. Alignment: left e. Margins (inches): Left: 1.25; Right: 1.25; Top: 1; Bottom: 1

4. Do not forget to write your name as a header on each page. 5. Please enter page number as footer for each page. 6. Submit the assignment as pdf document.

Note: If you fail to meet the above specifications, your assignment submission would not be graded, and you would be awarded a zero.