Assignment Prompt & Instructions
This assignment will be submitted to Turnitin™. **Instructions**
Refer to the rubric for more specific details on how this will be graded.
## Signature Assignment
## **Background**
Today's threats are constantly changing, so protecting an organization requires more than just separate security measures. Businesses need **unified cybersecurity plans** that address all risks, support their overall goals, and include various security and privacy safeguards across all their activities. This assignment asks you to combine the individual cybersecurity components you've been working on into a single, strategic document. A strong integrated cybersecurity plan is vital for organizations to effectively handle information security and privacy risks, follow relevant rules, and keep the trust of their stakeholders. By connecting cybersecurity efforts to the organization's purpose and business needs, organizations can make sure their security investments are valuable and contribute to their success. This plan should act as a guide for the organization's cybersecurity work, offering direction on managing risks, putting controls in place, and continuously monitoring security.
## **Instructions**
Develop a complete cybersecurity plan for a fictional organization. You get to decide the type of organization, size, industry, and main goals. This plan should build upon the individual cybersecurity components you have created in previous weeks of this course and present a connected and strategic way to keep the organization secure. Your integrated cybersecurity plan should include, but not be limited to, the following:
– **Executive Summary:** Provide a general overview of the cybersecurity plan. Explain how it aligns with an organization's main goals and the key ideas behind the plan. Highlight the importance of combining security and privacy to protect information confidentiality, integrity, and availability. Emphasize how cybersecurity leadership will support the organization's mission.
– **Risk Management Approach:** Detail how an organization will manage cybersecurity risks. This should cover how security and privacy risks are identified, assessed, addressed, and monitored. Describe how this risk management process will guide the selection and implementation of security and privacy safeguards. Consider identifying important assets and how their significance to the organization's objectives and risk approach is managed.
– **Security and Privacy Safeguards:** Specify the types of security and privacy measures that will be used to reduce identified risks. This might include management practices, technical solutions, and physical controls. Explain why these measures were chosen based on an organization's risk assessment and how they fit with relevant standards and common practices discussed in the course. Remember that security should be a fundamental part of software, and privacy should be considered from the very beginning of any project.
– **Secure Software Development Process:** If your organization develops software, describe how security will be incorporated throughout the software development lifecycle. This should include defining security needs early on, using secure coding techniques, performing security testing, and managing vulnerabilities. Think about how you would turn good practices for secure application development and data privacy into practical guidelines.
– **Supply Chain Risk Management:** Address the risks connected to an organization's suppliers, including how systems and components are acquired, developed, and maintained. Describe the strategies and steps for identifying, assessing, and reducing these risks.
– **Incident Response Plan:** Summarize the main parts of the organization's plan for detecting, responding to, and recovering from security incidents. This should include who is responsible for what, how communication will happen, and the steps for stopping, eliminating, and recovering from incidents.
– **Security Monitoring and Assessment:** Describe how the effectiveness of the implemented security measures will be continuously checked and evaluated. This should include the use of appropriate tools and methods for finding attacks and weaknesses. Consider the potential role of a dedicated security team or center.
– **Training and Awareness:** Outline the organization's plan for educating all employees about security and privacy. Emphasize the importance of leadership's commitment to secure development being communicated.
– **Alignment with Strategic Goals:** Clearly explain how the proposed cybersecurity plan helps the organization achieve its main strategic goals and objectives. For example, if a goal is to increase customer trust, explain how the cybersecurity plan helps protect customer data and ensure reliable services.
Remember to base your plan on the information provided in the course materials. Your plan should be well-organized and thorough, showing a strong understanding of integrated cybersecurity principles. **The result should be a unified solution combining all the components you've developed in previous weeks into a single, strategically focused cybersecurity plan for your chosen organization.**
Length: This assignment must be 14 pages (excluding the title and reference pages).
References: Include 7 scholarly resources.
## **Grading**
This assignment is worth 30 points
## **Rubric Name: Signature Assignment Rubric**
Criteria **Exceeds Expectations (90%-100%) A, A-Meets Expectations (80%-89%) B+, B, B-Needs Improvement (73%-79%) C+, CDeficient (40%-72%) C-. FNot Evident (0%-39%) FCriterion Score** Devised appropriate cybersecurity operations plan across an enterprise through the creation of comprehensive integrated cybersecurity plan that aligns with needs of selected organization. (30%)9 points
Comprehensive, detailed integrated cybersecurity solution, including **all** required components, that aligns with the goals and objectives of the selected case study organization, is provided. Justification for recommendations is supported by industry frameworks and standards.
7.65 points
Comprehensive, detailed integrated cybersecurity solution, including **most** required components, that aligns with the goals and objectives of the selected case study organization, is provided. Justification for recommendations is supported by industry frameworks and standards.
6.84 points
Comprehensive, detailed integrated cybersecurity solution, including **some** required components, that aligns with the goals and objectives of the selected case study organization, is provided. Justification for recommendations is supported by industry frameworks and standards.
3.6 points
Comprehensive, detailed integrated cybersecurity solution, including all **basic** required components, that aligns with the goals and objectives of the selected case study organization, is provided. Justification for recommendations is supported by industry frameworks and standards. Essential details are missing, or a lack of cohesiveness in approach is present.
0 points
A solution plan lacks integration or does not include assumptions, justification, or **necessary details** for documenting essential cybersecurity need requirements of selected organization **are missing**, or detail lacks alignment with the goals and objectives of the selected case study organization.
Score of Devised appropriate cybersecurity operations plan across an enterprise through the creation of comprehensive integrated cybersecurity plan that aligns with needs of selected organization. (30%),/ 9Assignment Instructions (20%)6 points
Correctly completed all the assignment instructions.
5.1 points
Correctly completed most of the assignment instructions.
4.56 points
Incorrectly completed some parts of the assignment.
2.4 points
Incorrectly completed most parts of the assignment.
0 points
Not attempted or needs major substantial improvement overall.
Score of Assignment Instructions (20%),/ 6Content and Critical Thinking (20%)6 points
Strong evidence of content knowledge.
Responses were thoughtful, thorough, and well-reasoned.
5.1 points
Good evidence of content knowledge.
In general, improvement in responses to demonstrate critical thinking is needed.
4.56 points
Some evidence of content knowledge.
Some improvement is needed to show adequate understanding of content and the use of critical thinking.
2.4 points
Little evidence of content knowledge.
Significant improvement is needed to show adequate understanding of content and the use of critical thinking.
0 points
Not attempted or needs major substantial improvement overall.
Score of Content and Critical Thinking (20%),/ 6Cohesion & Organization (20%)6 points
Effectively communicates a central idea or point that is present throughout the entirety of the assignment, in a coherent and logical manner. Overall writing is easy to understand.
5.1 points
Communicates a central idea or point that is present through most of the assignment in a coherent manner. Overall writing, for the most part, is easy to understand.
4.56 points
Communicates a central idea or point in the assignment, but may incorporate other unrelated topics. Coherence and organization are somewhat evident.
2.4 points
Communicates several unconnected ideas or points, with no apparent pattern or coherence.
0 points
Does not display a sense of organization or coherence. Non-existent, or lacks clear expression of relevant ideas or points.
Score of Cohesion & Organization (20%),/ 6Grammar, Mechanics, Formatting, APA, Integration of Resources (10%)3 points
No misspelled words, grammatical errors, formatting issues, or APA style errors. All resources are scholarly and appropriate for the assignment.
2.55 points
Some misspelled words, grammatical errors, formatting issues, or APA style errors. Most resources are scholarly and appropriate for the assignment.
2.28 points
Many misspelled words, grammatical errors, formatting issues, or APA style errors. Some resources are not scholarly or appropriate for the assignment.
1.2 points
Significant number of misspelled words, grammatical errors, formatting issues, or APA style errors. Most resources are not scholarly or appropriate for the assignment.
0 points
Not attempted or needs major substantial improvement overall.
Score of Grammar, Mechanics, Formatting, APA, Integration of Resources (10%),/ 3TotalScore of Signature Assignment Rubric,/ 30
### **Overall Score**
#### **Exceeds Expectation (90-100%) A, A-**
27 points minimum
#### **Meets Expectations (80%-89%) B+, B, B-**
24 points minimum
#### **Needs Improvement (73%-79%) C+, C**
21.9 points minimum
#### **Deficient (40%-72%) C-, F**
12 points minimum
#### **Not Evident (0%-39%) F**
0 points minimum