|
|
|
|
|
|
|
|
Security, Interoperability, and Operations Issues
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Issues
|
10 points
Identifies at least 10 issues based on the case study.
|
8 points
Identifies at least 8 issues based on the case study.
|
6 points
Identifies at least 6 issues based on the case study.
|
3 points
Identifies at least 3 issues based on the case study. The discussion lacked detail and/or was not well supported by information drawn from authoritative sources.
|
0 points
Doesn’t identify any issues based on the case study.
|
|
Relationship
|
12 points
Clearly describes and relates issues to security, interoperability and operations.
|
9 points
Basically describes and relates issues to security, interoperability and operations.
|
6 points
Weakly describes and relates issues to security, interoperability and operations.
|
3 points
Little description or related issues to security, interoperability and operations. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
No description or relationship of issues to security, interoperability and operations.
|
|
Requirements
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Prioritization
|
12 points
Clearly prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
9 points
Basically prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
6 points
Weakly prioritizes and articulates the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
3 points
Little prioritization or articulation of the issues as requirements based on immediate need, security posture, complexity, resource availability and cost. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
No prioritization or articulation of the issues as requirements based on immediate need, security posture, complexity, resource availability and cost.
|
|
Applicable Regulations and Standards
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
ID Applicable Government Documents
|
5 points
Identifies at least 4 government regulations and standards.
|
4 points
Identifies at least 3 government regulations and standards.
|
2 points
Identifies at least 2 government regulations and standards.
|
1 point
Identifies at least 1 government regulation or standard. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
No government regulations or standards identified.
|
|
Rationale Used
|
12 points
Clearly identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Must provide the rationale for selecting the documents.
|
9 points
Basically identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Must provide the rationale for selecting the documents.
|
6 points
Weakly identifies applicable government regulations and standards that govern how the requirements must be met, implemented or measured. May provide the rationale for selecting the documents.
|
3 points
Little identification of applicable government regulations and standards that govern how the requirements must be met, implemented or measured. May provide some rationale for selecting the documents. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
Doesn’t identify any applicable government regulations and standards that govern how the requirements must be met, implemented or measured. Doesn’t provide the rationale for selecting the documents.
|
|
Cites Regulations and Standards
|
5 points
Clearly cites all government regulations and standards used.
|
4 points
Basically cites all but 1 government regulation or standard used.
|
2 points
Cites all but 2 government regulations or standards used.
|
1 point
Cites just 1 government regulation or standard used. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
Doesn’t cite any government regulations or standards.
|
|
Controls
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Defines Controls
|
12 points
Identifies at least 4 appropriate NIST controls and links them to each issue using logic.
|
9 points
Identifies at least 3 appropriate NIST controls and links them to each issue using logic.
|
6 points
Identifies at least 2 appropriate NIST controls and links them to each issue using logic.
|
3 points
Identifies at least 1 appropriate NIST control and links it to each issue using logic. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
Doesn’t identify any appropriate NIST controls or links them to the issue using logic.
|
|
Rationale for Control
|
12 points
Clear and detailed rationale as to how those controls mitigate the risk identified.
|
9 points
Basic description of rationale as to how those controls mitigate the risk identified.
|
6 points
Weak description of rationale as to how those controls mitigate the risk identified.
|
3 points
Little description and rationale as to how those controls mitigate the risk identified. (Or, inappropriate or excessive copying from other authors' work.)
|
0 points
No description or rationale as to how those controls mitigate the risk identified.
|
|
Finds and Applies Knowledge
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Use of Authoritative Sources
|
5 points
Used at least 5 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No APA style errors in sources.
|
4 points
Used at least 3 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No more than 1 APA errors in sources.
|
2 points
Used at least 2 authoritative or scholarly sources in paper. One must be NIST SP 800-53. No more than 2 APA errors in sources.
|
1 point
May have used 1 authoritative or scholarly source in paper. May use NIST SP 800-53. May not have used APA style formatting.
|
0 points
No authoritative or scholarly sources used in paper. NIST SP 800-53 not mentioned.
|
|
Citation of Sources
|
5 points
All sources cited. No errors in citing material in paper.
|
4 points
All but 1 source cited. Had no more than 5 citing errors in paper.
|
2 points
All but 2 sources cited. Had no more than 10 citing errors in paper.
|
1 point
All but 3 sources cited. Had less than 15 APA citing errors in paper.
|
0 points
No sources cited or had more than 15 APA citing errors in paper.
|
|
Organization, Execution and Appearance
|
Level 5
|
Level 4
|
Level 3
|
Level 2
|
Level 1
|
|
Formatting
|
5 points
Prepared MS Word document, used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
4 points
MS Word document didn’t follow up to two (2) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
2 points
MS Word document didn’t follow up to four (4) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
1 point
MS Word document followed only one (1) of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
0 points
Non MS Word document didn’t any of the following: used consistent formatting, section subheadings, submitted one file, used instructor provided template, correct coversheet and separate reference page and meets minimum page count.
|
|
Grammar and Punctuation
|
5 points
No grammar, use of first/second person, spelling or punctuation errors.
|
4 points
Less than 5 grammar errors, use of first/second person, spelling or punctuation errors.
|
2 points
Less than 10 grammar errors, use of first/second person, spelling or punctuation errors.
|
1 point
Less than 15 grammar errors, use of first/second person, spelling or punctuation errors.
|
0 points
More than 15 grammar errors, use of first/second person, spelling or punctuation errors.
|
|
Overall Score
|
Level 5
14 or more
|
Level 4
11 or more
|
Level 3
8 or more
|
Level 2
5 or more
|
Level 1
0 or more
|
|
|
|
|
|
|
|