4-2 Final Project Milestone Two: Information Security Roles and Responsibilities

IT 549 Milestone Two Guidelines and Rubric

Employing information assurance best practices will ensure a firm is able to eliminate hierarchical structures, become more f lat, and have greater customer touch
points by leveraging the correct information at the right time. Successful firms will maintain an established information assurance plan and posture that is
implemented and reviewed on a weekly basis.

The ability to properly assign roles is crucial to the design of an effective information assurance pla n. Without clearly identified roles and responsibilities, the key
members of an organization would not have a clear understanding of what was expected of them. The establishment of roles and responsibilities assists each
member to communicate clearly and effectively throughout the organization.

Prompt: In Module Four, you will submit your roles and responsibilities portion of the final project. Your submission should answer the following questions: Who
are the key leaders of the organization specific to how their responsibilities are connected to the security of the organization’s information ? You must also
identify key ethical considerations. What are the ramifications of key leaders not properly accounting for ethical and legal considerations? What are t he key
components of information assurance as they relate to individual roles and responsibilities within t he information assurance plan? For example, examine the
current policies as they relate to confidentiality, integrity, and availability of information.

Specifically, the following critical elements must be addressed:

II. Information Security Roles and Responsibilities
a) Analyze the role of the key leaders within the organization specific to how their responsibilities are connected to the security of the organization’s

information. What is the relationship between these roles?
b) Evaluate key ethical and legal considerations related to information assurance that must be taken into account by the key lea ders within the

organization. What are the ramifications of key leaders not properly accounting for ethical and legal considerations?
c) What are the key components of information assurance as they relate to individual roles and responsibilities within the infor mation assurance

plan? For example, examine the current policies as they relate to confidentiality, integrity, and availability of information.

Rubric
Guidelines for Submission: Your paper must be submitted as a two- to three-page Microsoft Word document with double spacing, 12-point Times New Roman
font, one-inch margins, and at least three sources cited in APA format.

Critical Elements Proficient (100%) Needs Improvement (75%) Not Evident (0%) Value

Responsibilities of Key
Leaders

Anal yzes the rol e of the key
l eaders wi thi n the organi zati on

s peci fi c to how thei r
res pons i bi lities are connected to
the s ecuri ty of the organi zati on’s
i nformati on

Anal yzes the rol e of the key
l eaders wi thi n the organi zati on

but mi s s es key rol es or as pects of
res pons i bi lities s peci fic to the
s ecuri ty of the organi zati on’s
i nformati on

Does not anal yze the rol e of the
key l eaders wi thi n the

organi zati on

30

Key Ethical and Legal
Considerations

Accuratel y eval uates key ethi cal
and l egal cons i derations rel ated
to i nformati on as s urance that
mus t be taken i nto account by

the key l eaders wi thi n the
organi zati on, i ncluding the
rami fi cati ons of key l eaders not
properl y accounti ng for ethi cal

and l egal cons i derations

Eval uates ethi cal and l egal
cons i derati ons rel ated to
i nformati on as s urance that mus t
be taken i nto account by the key

l eaders wi thi n the organi zati on
but does not i ncl ude the
rami fi cati ons of key l eaders not
properl y accounti ng for ethi cal

and l egal cons i derations , or
eval uati on i s i naccurate

Does not eval uate ethi cal and
l egal cons i derati ons rel ated to
i nformati on as s urance that mus t
be taken i nto account by the key

l eaders wi thi n the organi zati on

30

Key Components of
Information Assurance

Comprehens i vel y addres s es
components of i nformati on
as s urance as they rel ate to

i ndi vi dual roles and
res pons i bi lities wi thi n the
i nformati on as s urance pl an

Addres s es components of
i nformati on as s urance as they
rel ate to i ndi vi dual roles and

res pons i bi lities wi thi n the
i nformati on as s urance pl an but
does not addres s confi denti al ity,

i ntegri ty, and/or avai lability of
i nformati on

Does not addres s any
components of i nformati on
as s urance as they rel ate to

i ndi vi dual roles and
res pons i bi lities wi thi n the
i nformati on as s urance pl an

30

Articulation of
Response

Submi s s i on has no major errors
rel ated to ci tati ons , grammar,
s pel l i ng, s yntax, or organi zati on

Submi s s i on has major errors
rel ated to ci tati ons , grammar,
s pel l i ng, s yntax, or organi zati on

that negati vel y i mpact readabi lity
and arti cul ation of mai n i deas

Submi s s i on has criti cal errors
rel ated to ci tati ons , grammar,
s pel l i ng, s yntax, or organi zati on

that prevent unders tandi ng of
i deas

10

Earned Total 100%

IT 549 Milestone Two Guidelines and Rubric
Rubric