{"id":25043,"date":"2024-05-09T21:31:08","date_gmt":"2024-05-09T21:31:08","guid":{"rendered":"https:\/\/www.writemyessays.app\/blog\/questions\/assess-your-ability-to-identify-design-and-organize-information-technology-it-security-policies\/"},"modified":"2024-05-09T21:31:08","modified_gmt":"2024-05-09T21:31:08","slug":"assess-your-ability-to-identify-design-and-organize-information-technology-it-security-policies","status":"publish","type":"questions","link":"https:\/\/www.writemyessays.app\/blog\/questions\/assess-your-ability-to-identify-design-and-organize-information-technology-it-security-policies\/","title":{"rendered":"assess your ability to identify, design, and organize information technology (IT) security policies."},"content":{"rendered":"

Instructions<\/h2>\n
\n
\n

Purpose<\/h2>\n

This course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies.<\/p>\n

Learning Objectives and Outcomes<\/h2>\n

Successful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this project, you will be able to do the following:<\/p>\n

    \n
  • Evaluate compliance laws relevant to the U.S. Department of Defense.<\/li>\n
  • Assess policy frameworks appropriate for an organization in a given scenario.<\/li>\n
  • Evaluate security controls and standards for the seven domains of a typical IT infrastructure.<\/li>\n
  • Develop DoD-compliant policies for an organization\u2019s IT infrastructure.<\/li>\n<\/ul>\n

    Required Source Information and Tools<\/h2>\n

    Web References:<\/span><\/b> <\/span>Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on August 26, 2020.<\/span><\/p>\n

     <\/p>\n

    The following tools and resources will be needed to complete this project:<\/p>\n

      \n
    • Course textbook<\/span><\/li>\n
    • Internet access<\/li>\n
    • DoD instructions or directives
      https:\/\/www.esd.whs.mil\/dd\/<\/i><\/span><\/li>\n
    • Risk Management Framework (RMF) for DoD Information Technology (IT) <\/span>https:\/\/www.esd.whs.mil\/Portals\/54\/Documents\/DD\/issuances\/dodi\/851001p.pdf?ver=2019-02-26-101520-300<\/i><\/li>\n
    • U.S. Department of Defense (DoD) Chief Information Office Library<\/span><\/li>\n<\/ul>\n

      https:\/\/dodcio.defense.gov\/Library\/<\/i><\/p>\n

        \n
      • Department of Defense Information Security Program
        https:\/\/www.esd.whs.mil\/Portals\/54\/Documents\/DD\/issuances\/dodm\/520001m_vol1.pdf?ver=2020-08-04-092500-203<\/i><\/span><\/li>\n
      • Department of Defense Internet Services and Internet-Based Capabilities
        https:\/\/www.esd.whs.mil\/Portals\/54\/Documents\/DD\/issuances\/dodi\/817001p.pdf<\/i><\/li>\n<\/ul>\n

        You may consult other relevant sources, if needed. If so, include citations for those sources in the final deliverable for this report.<\/p>\n

        Deliverables<\/h2>\n

        This project is divided into several parts, each with a deliverable. The first three parts are research drafts, which should include organized lists and notes gathered during research, sources, and in some cases policy drafts. These documents should be organized and readable, but are not polished reports.<\/span><\/p>\n

         <\/span><\/p>\n\n\n\n\n\n\n\n\n
        \n

        Item<\/span><\/b><\/p>\n<\/td>\n

        		\n

        Deliverables<\/span><\/b><\/p>\n<\/td>\n<\/tr>\n<\/thead>\n

        \n

        Project Part 1<\/span><\/p>\n<\/td>\n

        		\n

        U.S. Compliance Laws Research<\/span><\/b><\/p>\n

        Submit a draft of your research of DOD-specific requirements for an organization\u2019s IT infrastructure and U.S. compliance laws that may affect the firm.<\/span><\/p>\n<\/td>\n<\/tr>\n

        \n

        Project Part 2<\/span><\/p>\n<\/td>\n

        		\n

        Infrastructure Research A<\/span><\/b><\/p>\n

        Submit a draft of (1) which policy framework(s) will be followed for the project and (2) DoD-compliant policies, standards, and controls that affect the User, Workstation, LAN, and LAN-to-WAN Domains.<\/span><\/p>\n<\/td>\n<\/tr>\n

        \n

        Project Part 3<\/span><\/p>\n<\/td>\n

        		\n

        Infrastructure Research B<\/span><\/b><\/p>\n

        Submit a bulleted list of DoD-compliant policies, standards, and controls that affect the WAN, Remote Access, and System\/Application Domains.<\/span><\/p>\n<\/td>\n<\/tr>\n

        \n

        Project Part 4<\/span><\/p>\n<\/td>\n

        		\n

        Final Report<\/span><\/b><\/p>\n

        Submit the final report of your class project.<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

         <\/span><\/p>\n

        \n

        Scenario<\/h2>\n

        You are a security professional for Blue Stripe Tech, an IT services provider with approximately 400 employees. Blue Stripe Tech partners with industry leaders to provide storage, networking, virtualization, and cybersecurity to clients.<\/p>\n

        Blue Stripe Tech recently won a large DoD contract, which will add 30 percent to the revenue of the organization. It is a high-priority, high-visibility project. Blue Stripe Tech will be allowed to make its own budget, project timeline, and tollgate decisions.<\/p>\n

        As a security professional for Blue Stripe Tech, you are responsible for developing security policies for this project. These policies are required to meet DoD standards for delivery of IT technology services to the U.S. Air Force Cyber Security Center (AFCSC), a DoD agency.<\/p>\n

        To do this, you must develop DoD-approved policies, standards, and control descriptions for your IT infrastructure (see the \u201cTasks\u201d section in this document). The policies you create must pass DoD-based requirements. Currently, your organization does not have any DoD contracts and thus has no DoD-compliant security policies, standards, or controls in place.<\/p>\n

        Blue Stripe Tech’s computing environment includes the following:<\/p>\n

          \n
        • 12 servers running the latest edition of Microsoft Server, providing the following:<\/li>\n<\/ul>\n
            \n
          • \n
              \n
            • Active Directory (AD)<\/li>\n
            • Domain Name System (DNS)<\/li>\n
            • Dynamic Host Configuration Protocol (DHCP)<\/li>\n
            • Enterprise resource planning (ERP) application (Oracle)<\/li>\n
            • A research and development (R&D) engineering network segment for testing, separate from the production environment<\/li>\n
            • Microsoft Exchange Server for email<\/li>\n
            • Email filter<\/li>\n
            • Cloud-based secure web gateway (web security, data loss protection, next-generation firewall, cloud application security, advanced threat protection)<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                \n
              • Two Linux servers running Apache Server to host your website<\/li>\n
              • 400 PCs\/laptops running Microsoft Windows 10, Microsoft 365 office applications, and other productivity tools<\/li>\n<\/ul>\n

                Tasks<\/h2>\n
                  \n
                • Develop a list of compliance laws required for DoD contracts.<\/li>\n
                • Determine which policy framework(s) will be used for this project.<\/li>\n
                • List controls placed on domains in the IT infrastructure.<\/li>\n
                • List required standards for common devices, categorized by IT domain.<\/li>\n
                • Develop DoD-compliant policies for the organization\u2019s IT infrastructure.<\/li>\n
                • Describe the policies, standards, and controls that would make the organization DoD compliant.<\/li>\n
                • Develop a high-level deployment plan for implementation of these polices, standards, and controls.<\/li>\n
                • Write a professional report that includes all of the above content-related items and citations for all sources.<\/li>\n<\/ul>\n

                  Submission Requirements<\/h4>\n
                    \n
                  • Format: Microsoft Word (or compatible)<\/span><\/li>\n
                  • Font<\/span>: Arial, size 12, double-space<\/span><\/li>\n
                  • Citation style: Your school\u2019s preferred style guide<\/span><\/li>\n
                  • Length of draft research documents: 2\u20134 pages<\/span><\/li>\n
                  • Length of final report: 14\u201318 pages<\/span><\/li>\n<\/ul>\n

                    Self-Assessment <\/span>Checklist for Final Report<\/span><\/h4>\n
                      \n
                    • I developed a list of compliance laws required for DoD contracts.<\/li>\n
                    • I listed controls placed on domains in typical IT infrastructure.<\/li>\n
                    • I listed required standards for common devices, categorized by IT domain.<\/li>\n
                    • I developed DoD-compliant policies<\/span> <\/span>and standards for my organization\u2019s IT infrastructure<\/li>\n
                    • I described the policies, standards, and controls that would make my organization DoD compliant.<\/li>\n
                    • I listed all applicable DoD frameworks in the final report.<\/li>\n
                    • I developed a high-level deployment plan for implementation of these polices, standards, and controls.<\/li>\n
                    • I created a professional, well-developed report with proper documentation, grammar, spelling, and punctuation.<\/li>\n
                    • I included citations for all sources used in the report.<\/li>\n
                    • I followed the submission guidelines.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

                      Instructions Purpose This course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies. Learning Objectives and Outcomes Successful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":[],"disciplines":[62],"paper_types":[],"tagged":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions\/25043"}],"collection":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions"}],"about":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/types\/questions"}],"author":[{"embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/comments?post=25043"}],"version-history":[{"count":0,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions\/25043\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/media?parent=25043"}],"wp:term":[{"taxonomy":"disciplines","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/disciplines?post=25043"},{"taxonomy":"paper_types","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/paper_types?post=25043"},{"taxonomy":"tagged","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/tagged?post=25043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}