Review the security policy template by Ctrl + click to follow the link. The assignment instruction is the attached file.

 

 

IT 241: Case Study Two Guidelines and Rubric
Overview: This case study analysis is the second of two formative tasks that will support your understanding of the key course concepts of human behaviors that
could potentially cause a security threat.
Prompt: Review the security policy template (https://cdt.ca.gov/ )on the California Department of Technology website. For each of the six sections,
summarize the content for the organization you have selected for the final project.
Specifically, the following critical elements must be addressed: Introduction: Provide a brief description of what this policy will state and why it is needed. State the security stance of your organization.
Roles and Responsibilities: Detail the specific responsibilities of each identifiable user population, including management, employees, and residual
parties.
Policy Directives: Describe the specifics of the security policy.
Enforcement, Auditing, and Reporting: State what is considered a violation and the penalties for noncompliance. The violation of a policy usually implies
an adverse action that needs to be enforced.
References: List all references mentioned in the policy, including organization standards, procedures, and government codes.
Control and Maintenance: State the author and owner of the policy. Describe the conditions and process in which the policy will be reviewed. A policy
review should be performed on at least an annual basis to ensure that the policy is current. Guidelines for Submission: Your case study should be submitted as a FIVE - to SIX -page Word document (in addition to the title page and references). Use
double spacing, 12-point Times New Roman font, one-inch margins, and APA citation format.
Instructor Feedback: This activity uses an integrated rubric in Blackboard. Students can view instructor feedback in the Grade Center.
Critical Elements
Introduction
Roles and Responsibilities
Policy Directives
Enforcement, Auditing,
and Reporting
References Proficient (100%)
Accurately describes the policy
Accurately details the specific
responsibilities
Sufficiently describes the specifics of the
security policy
Sufficiently states what is considered a
violation and the penalties for
noncompliance
Sufficiently lists all references Needs Improvement (75%)
Does not sufficiently describe the policy
Does not sufficiently detail the specific
responsibilities
Does not sufficiently describe the
specifics of the security policy
Does not sufficiently state what is
considered a violation and the penalties
for noncompliance
Does not sufficiently list all references Not Evident (0%)
Does not describe the policy
Does not provide the specific
responsibilities
Does not describe the specifics of the
security policy
Does not state what is considered a
violation and the penalties for
noncompliance
Does not list all references Value
10
20
20
20
10 Control and Maintenance
Articulation of Response Sufficiently describes the conditions and
process in which the policy will be
reviewed
Submission has no major errors related to
citations, grammar, spelling, syntax, or
organization Does not sufficiently describe the
conditions and process in which the
policy will be reviewed
Submission has major errors related to
citations, grammar, spelling, syntax, or
organization that negatively impact
readability and articulation of main ideas Does not describe the conditions and
process in which the policy will be
reviewed
Submission has critical errors related to
citations, grammar, spelling, syntax, or
organization that prevent understanding
of ideas
Earned Total 15
5 100%

Attachments:

• 1493175512-IT 241 Case Study Two Guidelines and Rubric - 1.docx