|
|
|
|
|
|
|
|
Security, Interoperability, and Operations Issues
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Issues
|
10 points
Identifies at least 10 issues based on the case study.
|
8 points
Identifies at least 8 issues based on the case study.
|
6 points
Identifies at least 6 issues based on the case study.
|
3 points
Identifies at least 3 issues based on the case study.
|
0 points
Doesn’t identify any issues based on the case study.
|
|
Relationship
|
12 points
Clearly describes and relates issues to security, interoperability and operations.
|
9 points
Basically describes and relates issues to security, interoperability and operations.
|
6 points
Weakly describes and relates issues to security, interoperability and operations.
|
3 points
Little description or related issues to security, interoperability and operations.
|
0 points
No description or relationship of issues to security, interoperability and operations.
|
|
Requirements
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Prioritization
|
12 points
Clearly prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
9 points
Basically prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
6 points
Weakly prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
3 points
Little prioritization or articulation of the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
0 points
No prioritization or articulation of the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
|
Applicable Regulations and Standards
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
ID Applicable Government Documents
|
5 points
Identifies at least 4 government regulations and standards.
|
4 points
Identifies at least 3 government regulations and standards.
|
2 points
Identifies at least 2 government regulations and standards.
|
1 point
Identifies at least 1 government regulation or standard.
|
0 points
No government regulations or standards identified.
|
|
Rationale Used
|
12 points
Clearly identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Must provide the rationale for selecting the documents.
|
9 points
Basically identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Must provide the rationale for selecting the documents.
|
6 points
Weakly identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. May provide the rationale for selecting the documents.
|
3 points
Little identification of applicable government regulations and standards that govern how the requirements must be met, implemented or measured. May provide some rationale for selecting the documents.
|
0 points
Doesn’t identify any applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Doesn’t provide the rationale for selecting the documents.
|
|
Cites Regulations and Standards
|
5 points
Clearly cites all government regulations and standards used.
|
4 points
Basically cites all but 1 government regulation or standard used.
|
2 points
Cites all but 2 government regulations or standards used.
|
1 point
Cites just 1 government regulation or standard used.
|
0 points
Doesn’t cite any government regulations or standards.
|
|
Controls
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Defines Controls
|
12 points
Identifies at least 4 appropriate NIST controls and links them to each issue using logic.
|
9 points
Identifies at least 3 appropriate NIST controls and links them to each issue using logic.
|
6 points
Identifies at least 2 appropriate NIST controls and links them to each issue using logic.
|
3 points
Identifies at least 1 appropriate NIST control and links it to each issue using logic.
|
0 points
Doesn’t identify any appropriate NIST controls or links them to the issue using logic.
|
|
Rationale for Control
|
12 points
Clear and detailed rationale as to how those controls mitigate the risk identified.
|
9 points
Basic description of rationale as to how those controls mitigate the risk identified.
|
6 points
Weak description of rationale as to how those controls mitigate the risk identified.
|
3 points
Little description and rationale as to how those controls mitigate the risk identified.
|
0 points
No description or rationale as to how those controls mitigate the risk identified.
|
|
Finds and Applies Knowledge
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Use of Authoritative Sources
|
5 points
Used at least 5 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No APA style errors in sources.
|
4 points
Used at least 3 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No more than 1 APA errors in sources.
|
2 points
Used at least 2 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No more than 2 APA errors in sources.
|
1 point
May have used 1 authoritative or scholarly source in paper. May use NIST SP 800-53. May not have used APA style formatting.
|
0 points
No authoritative or scholarly sources used in paper. NIST SP 800-53 not mentioned.
|
|
Citation of Sources
|
5 points
All sources cited. No errors in citing material in paper.
|
4 points
All but 1 source cited. Had no more than 5 citing errors in paper.
|
2 points
All but 2 sources cited. Had no more than 10 citing errors in paper.
|
1 point
All but 3 sources cited. Had less than 15 APA citing errors in paper.
|
0 points
No sources cited or had more than 15 APA citing errors in paper.
|
|
Organization, Execution and Appearance
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Formatting
|
5 points
Prepared MS Word document, used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
4 points
MS Word document didn’t follow up to two (2) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
2 points
MS Word document didn’t follow up to four (4) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
1 point
MS Word document followed only one (1) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
0 points
Non MS Word document didn’t any of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
|
Grammar and Punctuation
|
5 points
No grammar, use of first/second person, spelling or punctuation errors.
|
4 points
Less than 5 grammar errors, use of first/second person, spelling or punctuation errors.
|
2 points
Less than 10 grammar errors, use of first/second person, spelling or punctuation errors.
|
1 point
Less than 15 grammar errors, use of first/second person, spelling or punctuation errors.
|
0 points
More than 15 grammar errors, use of first/second person, spelling or punctuation errors.
|
|
Overall Score
|
Level 5
14 or more
|
Level 4
11 or more
|
Level 3
8 or more
|
Level 2
5 or more
|
Level 1
0 or more
|
jessiebear932
project_2_rubric.docx
0
