Scenario
You are a new security analyst for a start-up company that conducts all of their business online. The company’s CEO has asked you to prepare a detailed report on cybersecurity threats to your company, including an analysis of possible threats and a draft of a computer security policy.
Your paper should be between 1,250 and 1,500 words, excluding headings and reference pages. You should include a clear and concise summary outlining the security threats and the objectives of the security policy.
Company Details
There are 20 employees who work in an office, 5 employees who work remotely, and 10 contractors who work remotely.
Your company maintains a database of 5,000 users with personal account information including full name, email address, mailing address, and phone number.
Part 1: Threats
Identify, define, and analyze 5 to 7 cybersecurity threats that could affect the company. Compare and contrast these threats. Provide examples of these threats with real-world examples, citing relevant evidence for them.
Part 2: Security Policy
Develop a draft cybersecurity policy for the company. Your policy should describe how it will defend against the threats identified in part 1. Be sure to incorporate references and evidence in this section as well. Identify the people, process and technology that stand to be impacted.
Formatting & Sources
While you should provide peer-reviewed, academic sources, the following lessons from this course may be helpful when completing this assignment: What is Computer Security? – Definition & Basics, Types of Computer Security, Computer Security Policies Examples, What is Phishing? – Definition, Examples & Awareness
Please write your paper in the APA format. You may refer to the course material for supporting evidence, but you must also use five other sources and cite them using APA format.
Please include a mix of both primary and secondary sources, with at least one source from a scholarly peer-reviewed journal. If you use any Study.com lessons as sources, please also cite them in APA (including the lesson title and instructor’s name).
Primary sources are first-hand accounts such as interviews, advertisements, speeches, company documents, statements, and press releases.
Secondary sources come from peer-reviewed scholarly journals. You may use like JSTOR, Google Scholar, and Social Science Research Network to find articles from these journals. Secondary sources may also come from reputable websites with .gov, .edu, or .org in the domain. (Wikipedia is not a reputable source, though the sources listed in Wikipedia articles may be acceptable.)
You may use sources like JSTOR and Google Scholar to find articles from these journals. Secondary sources may also come from reputable websites with .gov, .edu, or .org in the domain. (Wikipedia is not a reputable source, though the sources listed in Wikipedia articles may be acceptable.)
If you’re unsure about how to use APA format to cite your sources, please see the following lessons:
What is APA Format? Definition & Style
How To Format APA Citations
Grading Rubric
Your essay will be graded based on the following rubric:
Category Unacceptable (0-2) Needs Improvement (3-6) Good (7-8) Excellent (9-10) Total Possible Points
Executive Summary (x2) Does not produce a viable summary statement. Does not provide adequate explanation of what will be discussed. Produces a summary statement but it is not high-level enough. Not effective for an executive-level reader. Produces a good summary statement with adequate scope and complexity. Produces a clear and concise summary outlining cause and plan objectives. 20
Cyber Threat Analysis (x4) Threats are hinted at, but not analyzed; documentation is lacking; lack of effort to define terms A threat or two is defined, but lacking depth of analysis or thought. Limited or no use of resources. A few threats are discussed with analysis; student compares and contrasts threats and provides some evidence. At least 5 cyber security threats are analyzed. Analysis shows solid understanding of threats through compare and contrast; examples provided; conclusions supported with evidence. 40
Policy Creation (x3) Policy is nonexistent or is not related to the original threats presented in Part 1. No evidence provided. A plan is created and items of scope are hinted at, but the organization of the plan is not well-defined. Plan built out and well-organized. Each step of the plan outlines the appropriate people, process and technology. Strong and well-written plan that is expertly organized around scope areas as defined in the lesson content. People, process and technology well defined. 30
Clarity, Structure & Organization (x1) Disorganized and unclear structure. Language is difficult to understand. Contains grammar, spelling, and punctuation errors. Acknowledges the main points, but lacks a cohesive structure. Contains some unclear language and typos. Addresses the mains points in a cohesive structure. Language is understandable, clear, and correct. Main points are very clear and concise Organization is logical; transitions between points are smooth and enhance clarity and delivery of main ideas 10
Total 100
Last Completed Projects
| topic title | academic level | Writer | delivered |
|---|