case study

CYB 200 Module Three Case Study Activity Guidelines and Rubric

Overview

In this case study assignment, we will con�nue to inves�gate the Fundamental Security Design Principles at work in a real-world scenario. Through the lens of privacy protec�on, we will

analyze the following principles:

Isola�on

Encapsula�on

Complete Media�on

Minimize Trust Surface (Reluctance to trust)

Trust rela�onships

Case Study Scenario

The security team at your organiza�on receives an alert from your organiza�on’s cloud storage provider, DataStore. DataStore is a popular cloud-based data hos�ng service that your

organiza�on has contracted with to store public-facing informa�on such as product briefs and adver�sements in a “shared” pla�orm with many other customers. Your organiza�on has a

policy against transferring confiden�al data to the cloud and has asked DataStore to alert your security team if they detect unusual data-transfer ac�vi�es. DataStore no�ced that an ac�ve

connec�on transferred large numbers of files to their pla�orm and promptly inves�gated. Upon closer inspec�on, the DataStore employee recognized that customer names and social

security numbers were clearly displayed in the uploaded files.

The security team, with the help of DataStore, discovered that an intern was responsible for the large data transfer. The intern accidentally saved confiden�al email a�achments to a folder

on his system that synchronized with DataStore. The intern apologized and stated that he would delete the data from the cloud storage loca�on. However, the problema�c files were

available for public download for a short period of �me.

Prompt

A�er reading the scenario above, complete the Fundamental Security Design Principles mapping table in the Case Study Template and answer the short response ques�ons. You’ll no�ce that

the Fundamental Security Design Principles listed differ from those presented in previous ac�vi�es. In the cybersecurity trade, there are many different design principles and frameworks.

Successful prac��oners learn to work with many different (but conceptually similar) principles to achieve their security goals.

Specifically, you must address the cri�cal elements listed below:

I. Fundamental Security Design Principles Mapping: Fill in the table in the Module Three Case Study Template by comple�ng the following steps for each control recommenda�on:

A. Specify which Fundamental Security Design Principle applies to the control recommenda�ons by marking the appropriate cells with an X.



9/16/24, 3:18 PM Assignment Information

https://learn.snhu.edu/d2l/le/content/1698647/viewContent/35102835/View 1/3

B. Indicate which security objec�ve (confiden�ality, availability, or integrity) applies best to the control recommenda�ons.

C. Explain your choices in one to two sentences with relevant jus�fica�ons.

II. Short Response Ques�ons:

A. Is it possible to use Data Store and maintain an isolated environment? Explain your reasoning.

B. How could the organiza�on have more effec�vely applied the principle of minimizing trust surface with Data Store to protect its confiden�al data? Explain your reasoning.

C. How can the organiza�on build a more security-aware culture from the top down to prevent mistakes before they happen? Explain your reasoning.

What to Submit

Submit your completed Fundamental Security Design Principles map and short response answers in the Module Three Case Study Template. Your submission should be 1–2 pages in length

(plus a cover page and references, if used) and wri�en in APA format. Use double spacing, 12-point Times New Roman font, and one-inch margins. Use a file name that includes the course

code, the assignment number, and your name—for example, CYB_100_1-4_Neo_Anderson.docx.

Module Three Case Study Activity Rubric

Criteria Proficient (100%) Needs Improvement (65%) Not Evident (0%) Value

Mapping: Fundamental

Security Design Principle

Specifies which Fundamental Security

Design Principle applies to at least 8 of the

control recommenda�ons

Specifies which Fundamental Security

Design Principle applies to fewer than 8 of

the control recommenda�ons

Does not complete any of the

Fundamental Security Design Principle

cells

20

Mapping: Security Objec�ve Indicates which security objec�ve (CIA)

best applies to 8 or more control

recommenda�ons

Indicates which security objec�ve (CIA)

best applies to fewer than 8 control

recommenda�ons

Does not complete any of the CIA triad 20

Mapping: Explain Explains choices with relevant

jus�fica�ons for at least 8 of the control

recommenda�ons

Explains choices with relevant

jus�fica�ons for fewer than 8 of the

control recommenda�ons

Does not address cri�cal element, or

response is irrelevant

25

Short Response: Isolated

Environment

Explains if it is possible to use Data Store

and maintain an isolated environment

Addresses “Proficient” criteria, but there

are gaps in clarity, logic, or detail

Does not address cri�cal element, or

response is irrelevant

10

Short Response: Minimizing

Trust Surface

Explains how the organiza�on could have

more effec�vely applied the principle of

minimizing trust surface to protect its

confiden�al data

Addresses “Proficient” criteria, but there

are gaps in clarity, logic, or detail

Does not address cri�cal element, or

response is irrelevant

10

9/16/24, 3:18 PM Assignment Information

https://learn.snhu.edu/d2l/le/content/1698647/viewContent/35102835/View 2/3

Criteria Proficient (100%) Needs Improvement (65%) Not Evident (0%) Value

Short Response: Security-

Aware Culture

Explains how the organiza�on can build a

more security-aware culture from the top

down to prevent mistakes before they

happen

Addresses “Proficient” criteria, but there

are gaps in clarity, logic, or detail

Does not address cri�cal element, or

response is irrelevant

10

Ar�cula�on of Response Submission has no major errors related to

cita�ons, grammar, spelling, or

organiza�on

Submission has some errors related to

cita�ons, grammar, spelling, or

organiza�on that nega�vely impact

readability and ar�cula�on of main ideas

Submission has cri�cal errors related to

cita�ons, grammar, spelling, or

organiza�on that prevent understanding of

ideas

5

Total: 100%

9/16/24, 3:18 PM Assignment Information

https://learn.snhu.edu/d2l/le/content/1698647/viewContent/35102835/View 3/3