Name
Strayer University
Educational Institution Contingency Planning
CIS 349 - Information Technology Audit and Control
Task 6: Educational Institution Contingency Planning
Create a fictional university with multiple campuses and online learning platforms.
Describe the organization's primary functions, IT infrastructure, and potential threats, such as
natural disasters, cyberattacks, and health emergencies (e.g., pandemics).
Write a 10-15 page paper explaining the importance of contingency planning in the educational
sector and its role in ensuring continuity of learning.
1. Develop a contingency plan for the university, including BIA, IRP, DRP, and BCP
components.
2. Detail policies and procedures related to remote learning, student support, and faculty
training.
3. Explain the processes for implementing and testing the contingency plan, including
online learning platform stress tests and faculty readiness assessments.
4. Create a hypothetical scenario involving a prolonged campus closure due to a public
health emergency and explain how the contingency plan addresses it, including virtual
teaching and student support timelines.
5. Explore ethical concerns related to equitable access to education and student data
privacy during online learning.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins
on all sides; citations and references must follow APA or school-specific format. Check
with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the
professor’s name, the course title, and the date. The cover page and the reference page
are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
Explain risk management in the context of information security.
Develop a disaster recovery plan for an organization.
Summarize the various types of disasters, response and recovery methods.
Compare and contrast the methods of disaster recovery and business continuity.
Explain and develop a business continuity plan to address unforeseen incidents.
Describe crisis management guidelines and procedures.
Describe detection and decision-making capabilities in incident response.
Develop techniques for different disaster scenarios.
Evaluate the ethical concerns inherent in disaster recovery scenarios.
Use technology and information resources to research issues in disaster recovery.
Write clearly and concisely about disaster recovery topics using proper writing
mechanics and technical style conventions.
Grading for this assignment will be based on answer quality, logic / organization of the paper,
and language and writing skills, using the following rubric.
Points: 200 Educational Institution Contingency Planning
Criteria Unacceptable
Below 60% F
Meets
Minimum
Expectation
s
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. Provide an overview
of the organization and
indicate why
contingency planning
efforts are needed and
how these efforts could
benefit the business.
Weight: 10%
Did not submit or
incompletely
provided an
overview of the
organization and
did not submit or
incompletely
indicated why
contingency
planning efforts
are needed and
how these efforts
could benefit the
business.
Insufficiently
provided an
overview of the
organization
and
insufficiently
indicated why
contingency
planning efforts
are needed
and how these
efforts could
benefit the
business.
Partially
provided an
overview of the
organization
and partially
indicated why
contingency
planning efforts
are needed and
how these
efforts could
benefit the
business.
Satisfactorily
provided an
overview of the
organization
and
satisfactorily
indicated why
contingency
planning
efforts are
needed and
how these
efforts could
benefit the
business.
Thoroughly
provided an
overview of the
organization
and thoroughly
indicated why
contingency
planning efforts
are needed
and how these
efforts could
benefit the
business.
2. Develop a full
contingency plan for
the organization.
Include all subordinate
functions / sub plans,
including BIA, IRP,
DRP, and BCP efforts.
Weight: 25%
Did not submit or
incompletely
developed a full
contingency plan
for the
organization. Did
not submit or
incompletely
included all
subordinate
functions / sub
plans, including
BIA, IRP, DRP,
and BCP efforts.
Insufficiently
developed a
full contingency
plan for the
organization.
Insufficiently
included all
subordinate
functions / sub
plans, including
BIA, IRP, DRP,
and BCP
efforts.
Partially
developed a full
contingency
plan for the
organization.
Partially
included all
subordinate
functions / sub
plans, including
BIA, IRP, DRP,
and BCP
efforts.
Satisfactorily
developed a
full
contingency
plan for the
organization.
Satisfactorily
included all
