| Course Code | Class Code | Assignment Title | Total Points |
| CYB-650 | CYB-650-O500 | Benchmark – Framework Compliance Assessment Report | 250.0 |
| Criteria | Percentage | Unsatisfactory (0.00%) | Less than Satisfactory (65.00%) | Satisfactory (75.00%) | Good (85.00%) | Excellent (100.00%) | Comments | Points Earned |
| Content | 100.0% |
| Executive Summary | 15.0% | Executive summary is missing or lacks critical components. | The executive summary presents at least 65% of the content outlined within the assignment criteria. The information provided is vague and/or poorly developed. | The executive summary presents at least 75% of the content outlined within the assignment criteria. The information provided is cursory and lacking depth. | The executive summary clearly presents at least 85% of the content outlined within the assignment criteria. The information provided is complete and clear with some supporting evidence. | The executive summary comprehensively provides specific information necessary to assist the audience in understanding the Framework Compliance Assessment Report importance. The summary presents claims with clarity, order, and richness of detail for all of the assignment criteria outlined. |
| Organizational Objectives and Priorities | 15.0% | Student includes little knowledge about the organizational objectives and priorities. Subject knowledge is not evident. Analysis of the current cybersecurity risk status and future cybersecurity policy implementations is not outlined or outlined poorly. | Student includes little knowledge about the organizational objectives and priorities with few supporting details and examples. Little subject knowledge is evident. Ignores or superficially evaluates the current cybersecurity risk status and future cybersecurity policy implementations. Draws unwarranted or fallacious conclusions. | Student includes knowledge about the organizational objectives and priorities with supporting details and examples. Some subject knowledge is evident. A surface-level evaluation of the current cybersecurity risk status and future cybersecurity policy implementations is offered. | Student includes essential knowledge about organizational objectives and priorities with supporting details and examples. Subject knowledge appears to be good. Analysis of the current cybersecurity risk status and future cybersecurity policy implementations is direct, competent, and appropriate. | Student covers organizational objectives and priorities in depth with extensive details and examples. Subject knowledge is excellent. Student thoughtfully analyzes and evaluates current cybersecurity risk status and future cybersecurity policy implementations. Student draws warranted, judicious, non-fallacious conclusions. Student identifies the salient arguments providing explicit examples and details. |
| Organizational Data Flow Diagram (C 2.2) | 5.0% | Diagram is missing or lacks critical components. | The diagram is at least 65% complete. The information provided is vague and/or poorly developed. | The diagram is at least 75% complete. The information provided is cursory and lacking depth. | The diagram is at least 85% complete. The information provided is basically clear and addresses most of the assignment criteria. | Detailed, in-depth diagram fully illustrates the common flow of information and decisions at the major levels within the organization. |
| Operational Compliance and Risk Assessment (C 2.3) | 15.0% | Includes little knowledge about operational compliance and risk assessment. Subject knowledge is not evident. Analysis of the cybersecurity risk assessment, privacy risk management and compliance gaps is not outlined or outlined poorly. | Includes little knowledge about operational compliance and risk assessment with few supporting details and examples. Little subject knowledge is evident. Ignores or superficially evaluates the cybersecurity risk assessment, privacy risk management and compliance gaps. Draws unwarranted or fallacious conclusions. | Includes knowledge about operational compliance and risk assessment with supporting details and examples. Some subject knowledge is evident. Surface level evaluation of the cybersecurity risk assessment, privacy risk management and compliance gaps is offered. | Includes essential knowledge about operational compliance and risk assessment with supporting details and examples. Subject knowledge appears to be good. Analysis of the cybersecurity risk assessment, privacy risk management and compliance gaps is direct, competent, and appropriate. | Covers operational compliance and risk assessment in-depth with extensive details and examples. Subject knowledge is excellent. Thoughtfully analyzes and evaluates cybersecurity risk assessment, privacy risk management and compliance gaps. Draws warranted, judicious, non-fallacious conclusions. Identifies the salient arguments providing explicit examples and details. |
| Portal Diagram | 5.0% | Diagram is missing or lacks critical components. | The diagram is at least 65% complete. The information provided is vague and/or poorly developed. | The diagram is at least 75% complete. The information provided is cursory and lacking depth. | The diagram is at least 85% complete. The information provided is basically clear and addresses most of the assignment criteria. | Detailed, in-depth diagram fully illustrates the organization's operational environment and compliance. |
| Organizational Risk Assessment Chart | 5.0% | Chart is missing or lacks critical components. | The chart is at least 65% complete. The information provided is vague and/or poorly developed. | The chart is at least 75% complete. The information provided is cursory and lacking depth. | The chart is at least 85% complete. The information provided is basically clear and addresses most of the assignment criteria. | Student presents a complete, accurate chart prioritizing organizational risks. |
| Response and Recovery Planning | 15.0% | Student includes little knowledge about the response and recovery planning. Subject knowledge is not evident. Analysis of the current contingency, data backup, disaster recovery, and emergency operations mode plans, as well as testing and revision procedures, is not outlined or outlined poorly. | Student includes little knowledge about the response and recovery planning, with few supporting details and examples. Little subject knowledge is evident. Student ignores or superficially evaluates the current contingency, data backup, disaster recovery and emergency operations mode plans, as well as testing and revision procedures. Student draws unwarranted or fallacious conclusions. | Student includes knowledge about the response and recovery planning with some supporting details and examples. Some subject knowledge is evident. A surface-level evaluation of the current contingency, data backup, disaster recovery and emergency operations mode plans, as well as testing and revision procedures, is offered. | Student includes essential knowledge about the response and recovery planning with supporting details and examples. Subject knowledge appears to be good. Analysis of the current contingency, data backup, disaster recovery and emergency operations mode plans, as well as testing and revision procedures, is direct, competent, and appropriate. | Student covers response and recovery planning in depth with extensive details and examples. Subject knowledge is excellent. Student thoughtfully analyzes and evaluates current contingency, data backup, disaster recovery and emergency operations mode plans, as well as testing and revision procedures. Student draws warranted, judicious, non-fallacious conclusions. Student identifies the salient arguments providing explicit examples and details. |
| Improvements and Recommendations | 15.0% | Student includes little knowledge about improvements and recommendations. Subject knowledge is not evident. Analysis of opportunities for improvement organizational impact and monitoring is not outlined or outlined poorly. | Student includes little knowledge about improvements and recommendations with few supporting details and examples. Little subject knowledge is evident. Student ignores or superficially evaluates opportunities for improvement organizational impact and monitoring. Student draws unwarranted or fallacious conclusions. | Student includes knowledge about improvements and recommendations with supporting details and examples. Some subject knowledge is evident. A surface-level evaluation of opportunities for improvement organizational impact and monitoring is offered. | Student includes essential knowledge about improvements and recommendations with supporting details and examples. Subject knowledge appears to be good. Analysis of opportunities for improvement organizational impact and monitoring is direct, competent, and appropriate. | Student covers improvements and recommendations in depth with extensive details and examples. Subject knowledge is excellent. Student thoughtfully analyzes and evaluates opportunities for improvement organizational impact and monitoring. Student draws warranted, judicious, non-fallacious conclusions. Student identifies the salient arguments providing explicit examples and details. |
| Language Use, Audience Awareness and Mechanics of Writing | 10.0% | Surface errors are pervasive enough that they impede communication of meaning. Inappropriate word choice and/or sentence construction are employed. | Frequent and repetitive mechanical errors distract the reader. Inconsistencies in language choice (register) and/or word choice are present. | Some mechanical errors or typos are present, but are not overly distracting to the reader. Audience-appropriate language is employed. | Prose is largely free of mechanical errors, although a few may be present. The writer uses a variety of sentence structures and effective figures of speech. | Prose is largely free of mechanical errors. The writer uses a variety of effective sentence structures, figures of speech, and industry terminology. The writer is clearly in command of standard, written academic English. |
| Total Weightage | 100% |
Ripple32
Rubric_Print_Format2.xlsx
