4-2 Final Project Milestone Two: Case Analysis and Incident Impacts
IT 659 Milestone Two Guidelines and Rubric In Milestone Two, you will submit the Case Analysis and Incident Impacts portion of the final project. The purpose of this assignment is to analyze the case and determine the impact of the incident. Prompt: Analyze the ethical issues and determine the legal compliance issues within the organization, as well as the social and cultural impacts of these compliance issues. You will be expected to address the impact the incident may have had on the ethical and legal IT regulations at the time. The connection between the industry standards and the standards for informational technology should be determined, as well as the influence of the cultural impact on IT and cyber communication or commerce.
Specifically the following critical elements must be addressed: II. Case Analysis
a) Analyze the case to determine the ethical issues within the organization that may have led to the incident. What are these issues and why do you credit them for the incident?
b) Determine legal compliance issues within the organization that may have led to the incident or could lead to future incidents. Were there any legal and ethical standards in existence at the time that were not followed by the organization? What were these issues and how did they impact the organization?
c) Determine the societal and cultural impact of these compliance issues. Some things to consider in your assessment include specific targeting of demographic groups, victimization of certain customers, and so on.
III. Incident Impact
a) Determine the impact this incident may have had on the ethical andlegal IT regulations of the time. If there were no direct results of this case, what may have been the indirect impact and/or what was the impact of similar cases? For example, what regulatory changes resulted from this or similar cases? What is your reasoning?
b) Determine the connection between the industry standards and the standards in existence for information technology. Specifically, determine if the organization was lacking in either industryspecific or ITspecific alignment with regulations that may have contributed to the incident, and provide support for your conclusions. For example, misalignment with HIPAA laws in healthcare is an industryspecific deviation from standards.
c) Cultural Impact: Analyze the influence this incident may have had on various cultural attitudes toward IT and cyber communication or commerce. In other words, how could this incident impact views of information technology use?
Rubric Guidelines for Submission: The format of this assignment will be a three to fivepage Word document with double spacing, 12point Times New Roman font, oneinch margins, and at least three sources cited in APA format.
Critical Elements Exemplary (100%) Proficient (90%) Needs Improvement (70%) Not Evident (0%) Value
Case Analysis: Ethical Issues
Meets “Proficient” criteria, and reasoning evidences strong
ethical criteria or keen analytic skills regarding organizational ethics
Accurately analyzes the case to determine which ethical issues
within the organization led to the incident and why
Analyzes the case to determine which ethical issues within the
organization led to the incident, and why, but with gaps in accuracy or detail
Does not analyze the case to determine which ethical issues
within the organization led to the incident and why
15
Case Analysis: Legal
Compliance
Meets “Proficient” criteria and
evidences keen understanding of legal criteria of the time
Accurately determines the legal
compliance issues within the organization that led to this incident and could have resulted in other issues
Determines the legal
compliance issues within the organization that led to this incident and could have resulted in other issues, but
with gaps in accuracy or detail
Does not determine the legal
compliance issues within the organization that led to this incident and could have resulted in other issues
15
Case Analysis: Societal and Cultural
Impact
Meets “Proficient” criteria and evidences deep insight into unexpected, hidden, or complex impacts on culture and
society
Comprehensively and accurately determines the societal and cultural impacts of the legal and ethical
compliance issues
Determines the societal and cultural impacts of the legal and ethical compliance issues, but with gaps in accuracy or detail
Does not determine the societal and cultural impacts of the legal and ethical compliance issues
15
Incident Impact: Regulations
Meets “Proficient” criteria and evidences keen understanding of ethical and legal regulations following the incident
Accurately determines the direct or indirect impact of this or similar case on ethical and legal IT regulations at the time
Determines the direct or indirect impact of this or similar case on ethical and legal IT regulations at the time, but
with gaps in accuracy or logical reasoning
Does not determine the direct or indirect impact of this or similar case on ethical and legal IT regulations at the time
15
Incident Impact: Standards
Meets “Proficient” criteria and evidences keen insight into understanding and applying IT
and industryspecific standards for information security
Accurately determines the connection between the industry standards and the
standards in existence for information technology with logical reasoning and support
Determines the connection between the industry standards and the standards in existence
for information technology, but with gaps in accuracy or gaps in reasoning and support
Does not determine the connection between the industry standards and the
standards in existence for information technology
15
Incident Impact:
Cultural Impact
Meets “Proficient” criteria and
evidences keen insight into nuances of various cultural interpretations and views toward technology and cyber
security
Accurately analyzes the
influence this incident may have had on various cultural attitudes toward IT and cyber communication or commerce
Analyzes the influence this
incident may have had on various cultural attitudes toward IT and cyber communication or commerce,
Does not analyze the influence
this incident may have had on various cultural attitudes toward IT and cyber communication or commerce
15
but with gaps in accuracy or detail
Articulation of Response
Submission is free of errors related to citations, grammar,
spelling, syntax, and organization and is presented in a professional and easytoread
format
Submission has no major errors related to citations, grammar,
spelling, syntax, or organization
Submission has major errors related to citations, grammar,
spelling, syntax, or organization that negatively impact readability and articulation of
main ideas
Submission has critical errors related to citations, grammar,
spelling, syntax, or organization that prevent understanding of ideas
10
Earned Total 100%