Running Head: DESIGNING FEPRA TECHNICAL SAFEGUARDS
Assignment 1: Designing FEPRA Technical Safeguards
CIS 349: Week 2
Instructor: Shaun Gray
Strayer University
October 14, 2017
DESIGNING FEPRA TECHNICAL SAFEGUARDS
Assignment 1: Designing FERPA Technical Safeguards
Due Week 2nd worth 50 points
Imagine you are an Information Security consultant for a small college registrar’s
office consisting of the registrar and two assistant registrars, two student
workers, and one receptionist. The office is physically located near several other
office spaces. The assistant registrars utilize mobile devices over a wireless
network to access student records, with the electronic student records being
stored on a server located in the building. Additionally, each registrar’s office has
a desktop computer that utilizes a wired network to access the server and
electronic student records. The receptionist station has a desktop computer that
is used to schedule appointments, but cannot access student records. In 1974,
Congress enacted the Family Educational Rights and Privacy Act (FERPA) to
help protect the integrity of student records. The college has hired you to ensure
technical safeguards are appropriately designed to preserve the integrity of the
student records maintained in the registrar’s office.
Write a three to five page paper in which you:
1. Analyze proper physical access control safeguards and provide sound
recommendations to be employed in the registrar’s office.
2. Recommend the proper audit controls to be employed in the registrar’s office.
3. Suggest three logical access control methods to restrict unauthorized entities from
accessing sensitive information, and explain why you suggested each method.
4. Analyze the means in which data moves within the organization and identify
techniques that may be used to provide transmission security safeguards.
5. Use at least three quality resources in this assignment.'Note:'Wikipedia and similar
Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch
margins on all sides; citations and references must follow APA or school-specific
format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the
professor’s name, the course title, and the date. The cover page and the reference
page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
DESIGNING FEPRA TECHNICAL SAFEGUARDS
Describe the role of information systems security (ISS) compliance and its
relationship to U.S. compliance laws.
Use technology and information resources to research issues in security strategy
and policy formation.
Write clearly and concisely about topics related to information technology audit and
control using proper writing mechanics and technical style conventions.
Click/here/to view the grading rubric.
Grading for this assignment will be based on answer quality, logic / organization of the paper,
and language and writing skills, using the following rubric.
Points: 50 Assignment 1: Designing FERPA Technical Safeguards
Criteria Unacceptable
Below 60% F
Meets Minimum
Expectations
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. Analyze
proper physical
access control
safeguards and
provide sound
recommendatio
ns to be
employed in the
registrar's
office.
Weight: 21%
Did not submit or
incompletely analyzed
proper physical access
control safeguards and
did not submit or
incompletely provided
sound recommendations
to be employed in the
registrar's office.
Insufficientlyanalyz
ed proper physical
access control
safeguards and
insufficientlyprovide
d sound
recommendations
to be employed in
the registrar's
office.
Partially analyz0
ed proper
physical access
control
safeguards and
partially provide0
d sound
recommendatio
ns to be
employed in the
registrar's
office.
Satisfactorilyanalyz
ed proper physical
access control
safeguards and
satisfactorilyprovide
d sound
recommendations
to be employed in
the registrar's
office.
Thoroughlyanalyz
ed proper physical
access control
safeguards and
thoroughlyprovide
d sound
recommendations
to be employed in
the registrar's
