SEC 402– Cyber security
Week 4
30th September
Assignment 4: Security Governance for a Cloud-Based Educational
Platform
Due Week 4 and worth 75 points
Instructions: You are tasked with developing a security governance framework for a cloud-
based educational platform that serves students and educators worldwide. Write a seven to
nine-page paper addressing the following questions:
1. Develop a governance structure for the cybersecurity of the cloud-based educational
platform. Discuss the roles and responsibilities of key stakeholders, including
educational institutions, students, and the platform provider.
2. Evaluate the platform's compliance with data privacy regulations and recommend
measures to protect student and educator data. Discuss strategies for transparent
privacy policies, data encryption, and compliance with relevant educational standards.
3. Assess the user authentication and access control mechanisms on the platform.
Recommend strategies for securing access to educational resources, protecting user
accounts, and ensuring role-based access.
4. Develop guidelines for secure online learning practices. Discuss the importance of
secure communication channels, protection against cyber threats, and measures to
prevent unauthorized access to educational content.
5. Develop an incident response plan specifically tailored for cybersecurity incidents
affecting the educational platform. Discuss coordination with educational institutions,
communication strategies, and steps to minimize the impact on students and educators.
Ensure that your papers provide practical recommendations and considerations for the specified
scenarios. Use relevant industry standards, best practices, and case studies to support your
analysis and suggestions.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins
on all sides; citations and references must follow APA or school-specific format. Check
with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the
professor’s name, the course title, and the date. The cover page and the reference page
are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
Compare and contrast the methods of disaster recovery and business continuity.
Explain risk management in the context of information security.
Use technology and information resources to research issues in disaster recovery.
Write clearly and concisely about disaster recovery topics using proper writing
mechanics and technical style conventions.
Grading for this assignment will be based on answer quality, logic / organization of the paper,
and language and writing skills, using the following rubric.
Points: 75 Assignment 4: Security Governance for a Cloud-Based Educational
Platform
Criteria Unacceptable
Below 60% F
Meets
Minimum
Expectations
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. Explain the basic
primary tasks, ongoing
evaluations, and major
policy and procedural
changes that would be
needed to perform as
the BC lead / manager.
Weight: 20%
Did not submit or
incompletely
explained the
basic primary
tasks, ongoing
evaluations, and
major policy and
procedural
changes that
would be needed
to perform as the
BC lead /
manager.
Insufficiently
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Partially
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Satisfactorily
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Thoroughly
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
