Module 1.3

ISE 620 Milestone One Guidelines and Rubric Overview: The final project for this course is the creation of a security posture and response analysis report. Throughout this course, there will be key milestone activities that will give you adequate time to research, analyze, and put together your report. These milestones are designed to build upon each other so that you can get started on key aspects of your final project and receive feedback from your instructor for improving your work as you draft your report. For this milestone, you will submit a fact-finding and state selection brief. The scoring of this milestone will be based on whether you have demonstrated that you have reviewed the key materials needed to successfully complete your final project. Remember to review the Final Project Guidelines and Rubric document for how you will be scored on your final submission. Completing this milestone now will be important, as legislation plays a crucial role in an organization’s security policy. This milestone will also help prepare you for Module Three, which explores the relationship between legislation and an organization’s security policy. Prompt: Imagine you are a cybersecurity consultant working for Business Secure, a fictitious cybersecurity firm. Business Secure has been approached by Health Network Inc. (HealthNet), a fictitious health services organization. HealthNet would like Business Secure to develop a request for proposal (RFP) based on HealthNet’s security needs. Review the information on HealthNet in the Final Project Guidelines and Rubric document (in the Assignment Guidelines and Rubrics section of the course). Then submit a brief that identifies the organization and location, the company’s basic information systems, the stakeholders, and the network itself. Keep in mind that while your final project will evaluate all of HealthNet’s policies and security measures, you will select one corporate office to focus on for state legislation: California (HQ), Illinois, Nevada, Oregon, or Washington State. Make sure you specify which state you will focus on for the state legislation. It is important to note that some states have cybersecurity legislation that impacts organizations. Specifically, the following critical elements must be addressed:

I. Company Background a) Briefly describe the organization and its information systems. b) Who are the stakeholders of the organization’s information systems, specifically the network in question?

II. State Selection and Resources a) Identify the state you have selected for the project (the HealthNet office in California, Illinois, Nevada, Oregon, or Washington State). b) Identify three resources that will be helpful for you to use in analyzing the legislative impacts for your state. Your choices may include any

provided to you within the course. III. Articulation of Response

a) As always, your submission should have no major errors related to grammar, citations, spelling, syntax, or organization. You will be using APA format for your resources in your final project, so submitting your choices in APA format now will ensure you will be able to address any errors in time for your final submission.

Guidelines for Submission: Your brief must be submitted as a 1- to 2-page Microsoft Word document with double spacing, 12-point Times New Roman font, one-inch margins, and at least three sources cited in APA format. Instructor Feedback: This activity uses an integrated rubric in Blackboard. Students can view instructor feedback in the Grade Center. For more information, review these instructions.

Critical Elements Attempted With Minimal or No Functional Issue

Attempted With Significant Functional Issues

Not Evident in Submission Value

Organization and Information Systems

Briefly describes organization and its information systems, with minimal or no issues in communicating description (100%)

Describes organization and its information systems, but description lacks some significant details or has inaccuracies in communicating description (75%)

Does not describe organization or its information systems (0%)

25

Stakeholders and Network

Describes key stakeholders and key aspects of network with minimal or no issues in description (100%)

Describes stakeholders and aspects of network, but description lacks significant details or has inaccuracies (75%)

Does not describe key stakeholders or key aspects of network (0%)

25

State Selection Selects a state to focus on for the project (100%)

Does not select a state to focus on for the project (0%)

20

Resources Identifies at least three resources that will be used for analyzing the legislative impacts, with minimal or no issues in effectiveness of the sources (100%)

Identifies at least three resources that will be used for analyzing the legislative impacts, but with significant gaps in effectiveness of sources (75%)

Does not identify at least three resources that will be used for analyzing the legislative impacts (0%)

20

Articulation of Response

Submission has no major errors related to grammar, citations, spelling, syntax, or organization (100%)

Submission has major errors related to grammar, citations, spelling, syntax, or organization that negatively impact readability and articulation of main ideas (75%)

Submission has critical errors related to grammar, citations, spelling, syntax, or organization that prevent understanding of ideas (0%)

10

Total 100%