|
|
|
|
|
|
|
|
|
Criteria
|
Excellent
|
Outstanding
|
Acceptable
|
Needs Improvement
|
Needs Significant Improvement
|
Missing or Unacceptable
|
|
Introduction
|
10 points
Provided an excellent introduction to the deliverable which clearly, concisely, and accurately summarized the structure and contents of the outline. Appropriately used information from 3 or more authoritative sources to support the introduction.
|
8.5 points
Provided an outstanding introduction to the deliverable which clearly and accurately summarized the structure and contents of the outline. Appropriately used information from 2 or more authoritative sources to support the introduction.
|
7 points
Provided an acceptable introduction to the deliverable which summarized the structure and contents of the outline. Appropriately used information from authoritative sources to support the introduction.
|
6 points
Provided an introduction to the deliverable but the section lacked some required details. Information from authoritative sources was mentioned and used.
|
4 points
Attempted to provide an introduction to the deliverable but this section lacked detail and/or was not well supported by information drawn from authoritative sources.
|
0 points
The introduction section was missing or did not present information about the contents of the deliverable.
|
|
Overview of Organization
|
20 points
Provided an excellent overview of the organization which clearly and concisely addressed the following:
• mission statement for the client
• brief overview of the client’s organization
• client's critical infrastructure sector
• information, information systems, and information infrastructure in the enterprise
• major IT related regulations and laws impacting client's IT operations
• products / services which the organization provides to its customers
Appropriately used information from 3 or more authoritative sources.
|
18 points
Provided an outstanding overview of the organization which addressed four or more of the following:
• mission statement for the client
• brief overview of the client’s organization
• client's critical infrastructure sector
• information, information systems, and information infrastructure in the enterprise
• major IT related regulations and laws impacting client's IT operations
• products / services which the organization provides to its customers
Appropriately used information from 2 or more authoritative sources.
|
16 points
Provided an excellent overview of the organization which addressed three or more of the following:
• mission statement for the client
• brief overview of the client’s organization
• client's critical infrastructure sector
• information, information systems, and information infrastructure in the enterprise
• major IT related regulations and laws impacting client's IT operations
• products / services which the organization provides to its customers
Appropriately used information from authoritative sources.
|
11 points
Provided an overview of the organization which addressed at least two of the following:
• mission statement
• client's critical infrastructure sector
• IT assets needing protection
• laws and regulations
Appropriately used information from authoritative sources.
|
6 points
Attempted to provide an overview of the organization but this section lacked detail and/or was not well supported by information drawn from authoritative sources.
|
0 points
The overview section was missing or did not present information about the organization
|
|
Outline: Coverage of Required Content Areas
|
30 points
Provided an excellent, well organized outline which addressed all 15 required content areas. For each content area in the outline:
(a) provided a brief introduction,
(b) identified two or more relevant risks / threats which must be mitigated, and
(c) identified two or more applicable security controls to mitigate the risks.
Appropriately used three or more authoritative sources.
|
27 points
Provided a well organized outline which addressed at least 12 of the required content areas. For each content area in the outline:
(a) provided a brief introduction,
(b) identified at least one relevant risk or threat which must be mitigated, and
(c) identified two or more applicable security controls to mitigate the risks.
Appropriately used at least two authoritative sources.
|
24 points
Provided an acceptable outline which addressed at least 10 of the required content areas. For each content area in the outline:
(a) provided a brief introduction,
(b) identified at least one relevant risk or threat which must be mitigated, and
(c) identified two or more applicable security controls to mitigate the risks.
Appropriately used authoritative sources.
|
21 points
Provided an outline which addressed at least 7 of the required content areas. For each content area in the outline:
(a) provided a brief introduction,
(b) identified at least one relevant risk or threat which must be mitigated, and
(c) identified at least one applicable security controls to mitigate the risk(s).
Appropriately used authoritative sources.
|
11 points
Attempted to provide an outline which address some of the client's requested content areas. Mentioned risks and security controls. OR, outline was not well supported by authoritative sources.
|
0 points
Outline was missing or did not address the required content areas.
|
|
Outline: Coverage of "Protective Solutions"
|
15 points
Identified 10 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 5 of the enterprise areas covered in the outline.
|
13 points
Identified 8 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 4 of the enterprise areas covered in the outline.
|
11 points
Identified 7 or more relevant and appropriate protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 4 of the enterprise areas covered in the outline.
|
8 points
Identified 5 or more protective solutions (technologies) which can be used to implement required security controls. Protective solutions are provided for at least 3 of the enterprise areas covered in the outline.
|
4 points
Identified relevant protective technologies for at least 2 enterprise areas.
|
0 points
Not included or no submission
|
|
APA Formatting for Citations and Reference List
|
5 points
Work contains citations and a reference list with entries for all cited resources. Reference list entries and in-text citations are correctly formatted using the appropriate APA style for each type of resource.
|
4 points
Work contains citations and a reference list with entries for all cited resources. One or two minor errors in APA format for in-text citations and/or reference list entries.
|
3 points
Work contains citations and a reference list with entries for all cited resources. No more than 3 minor errors in APA format for in-text citations and/or reference list entries.
|
2 points
Work contains a reference list with entries for most of the cited resources (no more than 2 omissions). No more than 5 minor errors in APA format for in-text citations and/or reference list entries.
|
1 point
Work attempts to credit sources but demonstrates a fundamental failure to understand and apply the APA formatting standard as defined in the Publication Manual of the American Psychological Association (6th ed.).
|
0 points
Not included or no submission.
|
|
Professionalism Part I: Organization & Appearance
|
5 points
Submitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type.
|
4 points
Submitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings (per the assignment’s directions).
|
3 points
Organization and/or appearance of submitted work could be improved through better use of fonts, color, titles, headings, etc. OR Submitted work has multiple style or formatting errors. Professional appearance could be improved.
|
2 points
Submitted work has multiple style or formatting errors. Organization and professional appearance need substantial improvement.
|
1 point
Submitted work meets minimum requirements but has major style and formatting errors. Work is disorganized and needs to be rewritten for readability and professional appearance.
|
0 points
Submitted work is poorly organized and formatted. Writing and presentation are lacking in professional style and appearance. Work does not reflect college level writing skills. Or, no submission.
|
|
Professionalism Part II: Execution
|
15 points
No formatting, grammar, spelling, or punctuation errors.
|
14 points
Work contains minor errors in formatting, grammar, spelling or punctuation which do not significantly impact professional appearance.
|
13 points
Errors in formatting, spelling, grammar, or punctuation which detract from professional appearance of the submitted work.
|
11 points
Submitted work has numerous errors in formatting, spelling, grammar, or punctuation. Work is unprofessional in appearance.
|
4 points
Submitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage.
|
0 points
Submitted work is poorly executed OR does not reflect college level work. Or, no submission
|
|
Overall Score
|
Excellent
90 or more
|
Outstanding
80 or more
|
Acceptable
70 or more
|
Needs Improvement
56 or more
|
Needs Significant Improvement
36 or more
|
Missing or Unacceptable Work
0 or more
|
|
|
|
|
|
|
|
|