Request for Proposal

IS4799: Unit 3 Assignment 1: RFP Technical Requirements and Differences from Existing Controls

© ITT Educational Services Page 1

Learning Objectives and Outcomes

You will learn how to identify the differences between the description of the Request for Proposal (RFP) of the client’s current information technology (IT) security policy framework and the environment that will be the result of the work requested in the RFP. After identifying differences, you will learn how to create a report that documents any gaps.

Assignment Requirements

In this assignment, you need to review the RFP’s description of the client’s current IT security policy framework. Then, review the RFP’s technical description of what changes are requested. Compare these two descriptions and prepare a list of differences where existing controls do not provide the desired level of protection. Each difference is a gap in the client’s current IT security policy framework.

You will be graded on your ability to analyze the client’s current IT security policy framework as described in the RFP and identify any gaps that exist between the existing framework and the desired final framework. You should be able to correlate the gaps with work that must be accomplished to satisfy the RFP. At a high level, the gap analysis provides a list of specific objectives that a firm’s proposal will address to satisfy the RFP.

Required Resources

RFP

Worksheet: IT Security Policy Framework/RFP Requirements

Submission Requirements

Format: Microsoft Word

Font: Arial, Size 12, Double-Space

Citation Style: Chicago Manual of Style

Length: 1–2 pages

Self-Assessment Checklist

I have reviewed the RFP’s description of the client’s current IT security policy framework.

I have reviewed the RFP’s technical description of what changes are requested.

I have compared these two descriptions and prepared a list of differences or gaps.

IS4799: Unit 3 IT Security Policy Framework/RFP Requirements Worksheet

© ITT Educational Services Page 2

Instructions: Review the Request for Proposal (RFP) information technology (IT) Security Framework Requirements. For each identified requirement, find the corresponding controls that address the requirement in the client’s current environment. Note any requirements that have no existing controls. RFP Requirement

Existing Control(s)