Module 1 Assignment

IT 552 Milestone One Guidelines and Rubric

In Module Two, you will create a statement of work (SOW) based on the scenario provided in the Case Document. Be sure to include the purpose of the proposal, address the security concerns of the chief executive officer, explain why the security awareness proposal will be vital to the organization, describe how the security posture will be addressed, clarify how human factors will be assessed, and list any organizational factors that will contribute to the status of the security posture. The SOW should also address the scope of the work, project objectives, business needs, business goals, technical requirements, deliverables, tasks to achieve the deliverables, high-level schedule of completing the deliverables and tasks, and personnel and equipment requirements. The SOW will serve as the basis for developing the final proposal. Specifically, the following critical elements must be addressed:

 What is the purpose of your proposal? Why is the new security awareness program vital for the organization? Use specific examples to illustrate your claims.

 Overall, how would you characterize the security posture of the organization? What were the major findings in your risk assessment of the organization’s current security awareness policies, practices, and processes?

 Specifically, are there human factors that adversely affect the security climate within the organization? If so, how? Be sure to consider unintentional and intentional threats to a healthy security culture.

 Specifically, are there organizational factors that contribute to an unhealthy security culture in the organization? If so, how? Be sure to consider organizational data flow, work setting, work planning and control, and employee readiness.

Guidelines for Submission: Your paper must be submitted as a two- to four-page Word document with double spacing, 12-point Times New Roman font, and one-inch margins, in APA format. Instructor Feedback: This activity uses an integrated rubric in Blackboard. Students can view instructor feedback in the Grade Center. For more information, review these instructions.

Critical Elements Exemplary (100%) Proficient (90%) Needs Improvement (70%) Not Evident (0%) Value

Purpose

Meets “Proficient” criteria and demonstrates evidence-based perspective on the significance of security awareness programs

Illustrates the purpose of the proposal using specific examples that demonstrate why the program is vital for the organization

The purpose of the proposal is minimally addressed

Does not describe the purpose of the proposal

20

Security Posture

Meets “Proficient” criteria and demonstrates perspective in the evaluation of the overall security posture using specific findings from the risk assessment

Makes a justifiable claim about the overall security posture of the organization

Insufficiently makes a claim about the overall security posture of the organization

Does not make a claim about the overall security posture of the organization

20

Human Factors

Meets “Proficient” criteria substantiated with examples of relevant unintentional and intentional threats

Identifies specific human factors that adversely affect the security climate and illustrates their impact

Insufficiently identifies specific human factors that adversely affect the security climate and illustrates their impact

Does not identify human factors that adversely affect the security climate

20

Organizational Factors

Meets “Proficient” criteria substantiated with relevant examples of data flow, work setting, work planning and control, and employee readiness

Identifies organizational factors that contribute to an unhealthy security culture

Minimally identifies organizational factors that contribute to an unhealthy security culture

Does not identify organizational factors that contribute to an unhealthy security culture

20

Articulation of Response

Submission is free of errors related to citations, grammar, spelling, syntax, and is presented in a professional and easy-to-read format

Submission has no major errors related to citations, grammar, spelling, or syntax

Submission has major errors related to citations, grammar, spelling, syntax, or organization that negatively impact readability and articulation of main ideas

Submission has critical errors related to citations, grammar, spelling, syntax, or organization that prevent the understanding of ideas

20

Earned Total 100%