Cloud Computing Security Policy

Criteria

Excellent

Outstanding

Acceptable

Needs Improvement

Needs Significant Improvement

Missing or Unacceptable

Policy Organization and Presentation (Structure)

10 points

Developed an excellent policy document which provided a title, purpose, scope, background, definitions, and policies section (at a minimum). Included 5 or more additional sections with appropriate and relevant content.

18 points

Developed an outstanding policy document which provided a title, purpose, scope, background, definitions, and policies section (at a minimum). Included 4 or more additional sections with appropriate and relevant content.

16 points

Developed an acceptable policy document which provided a title, purpose, scope, background, definitions, and policies section (at a minimum). Included 3 or more additional sections with appropriate and relevant content.

14 points

Developed a policy document which provided a title, purpose, scope, background, definitions, and policies section. Did not include any additional content.

9 points

Attempted to provide an Cloud Computing Security policy but content was substantially lacking. Fewer than five required sections were presented.

0 points

The submission did not contain a Cloud Computing Security policy.

Cloud Computing Definitions & Concepts

20 points

Demonstrated excellent understanding of Cloud Computing Concepts. Included, defined, and appropriately used all (9) of the following terms: (a) Cloud Services (b) IaaS, PaaS, SaaS (c) SecaaS (security as a service) (d) private, hybrid, community, and public clouds.

Appropriately used information from 4 or more authoritative sources.

18 points

Demonstrated outstanding understanding of Cloud Computing Concepts. Included, defined, and appropriately used seven (7) or more of the following terms: (a) Cloud Services (b) IaaS, PaaS, SaaS (c) SecaaS (security as a service) (d) private, hybrid, community, and public clouds.

Appropriately used information from 3 or more authoritative sources.

16 points

Demonstrated an acceptable level of understanding for Cloud Computing Concepts. Included, defined, and appropriately used six (6) or more of the following terms: (a) Cloud Services (b) IaaS, PaaS, SaaS (c) SecaaS (security as a service) (d) private, hybrid, community, and public clouds.

Appropriately used information from 2 or more authoritative sources.

14 points

Demonstrated some understanding for Cloud Computing Concepts. Included, defined, and appropriately used three (3) or more of the following terms: (a) Cloud Services (b) IaaS, PaaS, SaaS (c) SecaaS (security as a service) (d) private, hybrid, community, and public clouds.

Appropriately used information from authoritative sources.

11 points

Attempted to use cloud computing terminology in the provided policy. Definitions and correct usage were lacking or noticeably incorrect.

Mentioned information from authoritative sources

0 points

Required content was missing or unacceptable.

Transition Plan & Deployment Strategy

15 points

Provided an excellent transition plan which included a well justified cloud deployment strategy. Clearly and concisely explained why the selected deployment type (private, public, hybrid, or community cloud) was chosen.

Use and cited 3 or more authoritative sources.

14 points

Provided an outstanding transition plan which included a well justified cloud deployment strategy. Clearly explained why the selected deployment type (private, public, hybrid, or community cloud) was chosen.

Use and cited 2 or more authoritative sources.

13 points

Provided an acceptable transition plan which included a cloud deployment strategy. Explained why the selected deployment type (private, public, hybrid, or community cloud) was chosen.

Use and cited authoritative sources.

11 points

Provided a transition plan which included a cloud deployment strategy but was lacking in details and/or explanations. Mentioned the selected deployment type (private, public, hybrid, or community cloud).

Use and cited authoritative sources.

9 points

Attempted to provide a transition plan for cloud computing. Plan did not address cloud deployment strategy.

Use and cited authoritative sources.

0 points

Section was missing or did not contain required / relevant information.

Implementation Plan Requirements

10 points

Provided excellent explanations (definitions) and discussed the applicability or relevancy for the following requirements from the federal government's implementation plan. (a) Shift to a “Cloud First” policy  (b) Stand-up contract vehicles for secure IaaS solutions  (c) Stand-up contract vehicles for commodity services  (d) Develop a strategy for shared services

Used and cited at least three authoritative sources.

8.5 points

Provided outstanding explanations (definitions) and discussed the applicability or relevancy for 3 or more of the following requirements from the federal government's implementation plan. (a) Shift to a “Cloud First” policy  (b) Stand-up contract vehicles for secure IaaS solutions  (c) Stand-up contract vehicles for commodity services  (d) Develop a strategy for shared services

Used and cited at least two authoritative sources.

7 points

Provided acceptable explanations (definitions) and discussed the applicability or relevancy for 2 or more of the following requirements from the federal government's implementation plan. (a) Shift to a “Cloud First” policy  (b) Stand-up contract vehicles for secure IaaS solutions  (c) Stand-up contract vehicles for commodity services  (d) Develop a strategy for shared services

Used and cited authoritative sources.

6 points

Attempted to provided explanations (definitions) for 2 or more of the following requirements from the federal government's implementation plan. Did not address relevancy or applicability of the requirements. (a) Shift to a “Cloud First” policy  (b) Stand-up contract vehicles for secure IaaS solutions  (c) Stand-up contract vehicles for commodity services  (d) Develop a strategy for shared services

Used and cited authoritative sources.

4 points

Attempted to explain / discuss requirements from the federal government's implementation plan.

OR, this section was not well supported by information from authoritative sources.

0 points

Section was missing or did not contain required / relevant information.

Policy Section: Policy Statements to Implement Cloud Security Requirements

20 points

Presented 15 or more policy statements to require implementation of cloud computing security requirements.

Policy statement(s) and supporting explanations are clear, concise, and accurate.

Used and cited at least three authoritative sources.

18 points

Presented 12 or more policy statements to require implementation of cloud computing security requirements.

Policy statement(s) and supporting explanations are clear and accurate.

Used and cited at least two authoritative sources.

16 points

Presented 10 or more policy statements to require implementation of cloud computing security requirements.

Policy statement(s) and supporting explanations are appropriate.

Used and cited authoritative sources.

11 points

Presented 5 or more policy statements to require implementation of cloud computing security requirements.

Policy statement(s) and supporting explanations may be lacking in details and/or relevant information.

Mentioned at least one authoritative source.

6 points

Attempted to present a policy statement or statements about implementing measures to secure cloud computing services.

OR, this section was not well supported by information from authoritative sources.

0 points

Section was missing or did not contain required / relevant information.

Crediting Sources

5 points

Work credits all sources used in a professional manner using APA format citations/references, foot notes with publication information, or end notes with publication information. Provides a Bibliography or "Works Cited" if not using APA format. Publication information is sufficient to retrieve all listed resources.

4 points

Work credits all sources used in a professional manner using APA format citations/references, foot notes with publication information, or end notes with publication information. Provides a Bibliography or "Works Cited" if not using APA format. One or two minor inconsistencies or errors in format. Publication information is sufficient to retrieve all listed resources.

3 points

Work credits all sources used in a professional manner using APA format citations/references, foot notes with publication information, or end notes with publication information. Provides a Bibliography or "Works Cited" if not using APA format.Fewer than five inconsistencies or errors in format. Publication information is sufficient to retrieve all listed resources.

2 points

Work credits most sources used in a professional manner.Fewer than ten inconsistencies or errors in format. Publication information is not sufficient to retrieve one or two of the required resources.

1 point

Work attempts to credit sources is unprofessional in appearance and/or publication information is not sufficient to retrieve three or more resources.

0 points

Not included or no submission.

Professionalism Part I: Organization & Appearance

5 points

Submitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type.

4 points

Submitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings (per the assignment’s directions).

3 points

Organization and/or appearance of submitted work could be improved through better use of fonts, color, titles, headings, etc. OR Submitted work has multiple style or formatting errors. Professional appearance could be improved.

2 points

Submitted work has multiple style or formatting errors. Organization and professional appearance need substantial improvement.

1 point

Submitted work meets minimum requirements but has major style and formatting errors. Work is disorganized and needs to be rewritten for readability and professional appearance.

0 points

Submitted work is poorly organized and formatted. Writing and presentation are lacking in professional style and appearance. Work does not reflect college level writing skills. Or, no submission.

Professionalism Part II: Execution

15 points

No formatting, grammar, spelling, or punctuation errors.

14 points

Work contains minor errors in formatting, grammar, spelling or punctuation which do not significantly impact professional appearance.

13 points

Errors in formatting, spelling, grammar, or punctuation which detract from professional appearance of the submitted work.

11 points

Submitted work has numerous errors in formatting, spelling, grammar, or punctuation. Work is unprofessional in appearance.

4 points

Submitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage.

0 points

Submitted work is poorly executed OR does not reflect college level work. Or, no submission

Overall Score

Excellent 90 or more

Outstanding 80 or more

Acceptable 70 or more

Needs Improvement 56 or more

Needs Significant Improvement 36 or more

Missing or Unacceptable Work 0 or more