Outline for an Enterprise IT Security Policy

profilejessiebear932
rubric_pro1.docx

Top of Form

Rubric Name: Project 1: Outline for an Enterprise IT Security Policy v2

Criteria

Excellent

Outstanding

Acceptable

Needs Improvement

Needs Significant Improvement

Missing or Unacceptable

Introduction

10 points

Provided an excellent introduction to the deliverable which clearly, concisely, and accurately summarized the structure and contents of the outline. Appropriately used information from 3 or more authoritative sources to support the introduction.

8.5 points

Provided an outstanding introduction to the deliverable which clearly and accurately summarized the structure and contents of the outline. Appropriately used information from 2 or more authoritative sources to support the introduction.

7 points

Provided an acceptable introduction to the deliverable which summarized the structure and contents of the outline. Appropriately used information from authoritative sources to support the introduction.

6 points

Provided an introduction to the deliverable but the section lacked some required details. Information from authoritative sources was mentioned and used.

4 points

Attempted to provide an introduction to the deliverable but this section lacked detail and/or was not well supported by information drawn from authoritative sources.

0 points

The introduction section was missing or did not present information about the contents of the deliverable.

Overview of Organization

20 points

Provided an excellent overview of the organization which clearly and concisely addressed the following:    •  mission statement for the client     •  brief overview of the client’s organization    •  client's critical infrastructure sector      •  information, information systems, and information infrastructure in the enterprise    •  major IT related regulations and laws impacting client's IT operations    •  products / services which the organization provides to its customers Appropriately used information from 3 or more authoritative sources.

18 points

Provided an outstanding overview of the organization which addressed four or more of the following:    •  mission statement for the client     •  brief overview of the client’s organization    •  client's critical infrastructure sector      •  information, information systems, and information infrastructure in the enterprise    •  major IT related regulations and laws impacting client's IT operations    •  products / services which the organization provides to its customers Appropriately used information from 2 or more authoritative sources.

16 points

Provided an excellent overview of the organization which addressed three or more of the following:    •  mission statement for the client     •  brief overview of the client’s organization    •  client's critical infrastructure sector      •  information, information systems, and information infrastructure in the enterprise    •  major IT related regulations and laws impacting client's IT operations    •  products / services which the organization provides to its customers Appropriately used information from authoritative sources.

11 points

Provided an overview of the organization which addressed at least two of the following:    •  mission statement    •  client's critical infrastructure sector      •  IT assets needing protection    •  laws and regulations Appropriately used information from authoritative sources.

6 points

Attempted to provide an overview of the organization but this section lacked detail and/or was not well supported by information drawn from authoritative sources.

0 points

The overview section was missing or did not present information about the organization

Outline: Coverage of Required Content Areas

30 points

Provided an excellent, well organized outline which addressed all 15 required content areas. For each content area in the outline:  (a) provided a brief introduction,  (b) identified two or more relevant risks / threats which must be mitigated, and  (c) identified two or more applicable security controls to mitigate the risks.

Appropriately used three or more authoritative sources.

27 points

Provided a well organized outline which addressed at least 12 of the required content areas. For each content area in the outline:  (a) provided a brief introduction,  (b) identified at least one relevant risk or threat which must be mitigated, and  (c) identified two or more applicable security controls to mitigate the risks.

Appropriately used at least two authoritative sources.

 

24 points

Provided an acceptable outline which addressed at least 10 of the required content areas. For each content area in the outline:  (a) provided a brief introduction,  (b) identified at least one relevant risk or threat which must be mitigated, and  (c) identified two or more applicable security controls to mitigate the risks.

Appropriately used authoritative sources.

21 points

Provided an outline which addressed at least 7 of the required content areas. For each content area in the outline:  (a) provided a brief introduction,  (b) identified at least one relevant risk or threat which must be mitigated, and  (c) identified at least one applicable security controls to mitigate the risk(s).

Appropriately used authoritative sources.

 

11 points

Attempted to provide an outline which address some of the client's requested content areas. Mentioned risks and security controls. OR, outline was not well supported by authoritative sources.

0 points

Outline was missing or did not address the required content areas.

Outline: Coverage of "Protective Solutions"

15 points

Identified 10 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 5 of the enterprise areas covered in the outline. 

13 points

Identified 8 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 4 of the enterprise areas covered in the outline.

11 points

Identified 7 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 4 of the enterprise areas covered in the outline.

8 points

Identified 5 or more protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 3 of the enterprise areas covered in the outline.

4 points

Identified relevant protective technologies for at least 2 enterprise areas. 

0 points

Not included or no submission

APA Formatting for Citations and Reference List

5 points

Work contains citations and a reference list with entries for all cited resources. Reference list entries and in-text citations are correctly formatted using the appropriate APA style for each type of resource.

4 points

Work contains citations and a reference list with entries for all cited resources. One or two minor errors in APA format for in-text citations and/or reference list entries.

3 points

Work contains citations and a reference list with entries for all cited resources. No more than 3 minor errors in APA format for in-text citations and/or reference list entries.

2 points

Work contains a reference list with entries for most of the cited resources (no more than 2 omissions). No more than 5 minor errors in APA format for in-text citations and/or reference list entries.

1 point

Work attempts to credit sources but demonstrates a fundamental failure to understand and apply the APA formatting standard as defined in the Publication Manual of the American Psychological Association (6th ed.).

0 points

Not included or no submission.

Professionalism Part I: Organization & Appearance

5 points

Submitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type.

4 points

Submitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings (per the assignment’s directions).

3 points

Organization and/or appearance of submitted work could be improved through better use of fonts, color, titles, headings, etc. OR Submitted work has multiple style or formatting errors. Professional appearance could be improved.

2 points

Submitted work has multiple style or formatting errors. Organization and professional appearance need substantial improvement.

1 point

Submitted work meets minimum requirements but has major style and formatting errors. Work is disorganized and needs to be rewritten for readability and professional appearance.

0 points

Submitted work is poorly organized and formatted. Writing and presentation are lacking in professional style and appearance. Work does not reflect college level writing skills. Or, no submission.

Professionalism Part II: Execution

15 points

No formatting, grammar, spelling, or punctuation errors.

14 points

Work contains minor errors in formatting, grammar, spelling or punctuation which do not significantly impact professional appearance.

13 points

Errors in formatting, spelling, grammar, or punctuation which detract from professional appearance of the submitted work.

11 points

Submitted work has numerous errors in formatting, spelling, grammar, or punctuation. Work is unprofessional in appearance.

4 points

Submitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage.

0 points

Submitted work is poorly executed OR does not reflect college level work. Or, no submission

Overall Score

Excellent 90 or more

Outstanding 80 or more

Acceptable 70 or more

Needs Improvement 56 or more

Needs Significant Improvement 36 or more

Missing or Unacceptable Work 0 or more

Bottom of Form