Question Details

This assignment consists of two (2) sections: a written paper and a PowerPoint presentation. You must submit both sections as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for.
 
In the day-to-day operations of information security, security professionals often focus the majority of their time dealing with employee access issues, implementing security methods and measures, and other day-to-day tasks. They often neglect legal issues that affect information security. As a result, organizations often violate security-related regulations and often have to pay heavy fines for their non-compliance.  Thus, as a Chief Information Officer in a government agency, you realize the need to educate for senior leadership on some of the primary regulatory requirements, and you realize the need to ensure that the employees in the agency are aware of these regulatory requirements as well.
 
Section 1: Written Paper
1. Write a six to eight (6-8) page paper in which you:
a. Provide an overview that will be delivered to senior management of regulatory requirements the agency needs to be aware of, including:
i. FISMA
ii. Sarbanes-Oxley Act
iii. Gramm-Leach-Bliley Act
iv. PCI DSS
v. HIPAA
vi. Intellectual Property Law
b. Describe the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.
c. Describe the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
d. Use at least five (5) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources. 


Section 2: PowerPoint Presentation
2. Create an eight to ten (8-10) slide security awareness PowerPoint presentation that will be presented to the agency- employees, in which you:
a. Include an overview of regulatory requirements and employee responsibilities, covering:
i. FISMA
ii. Sarbanes-Oxley Act
iii. Gramm-Leach-Bliley Act
iv. PCI DSS
v. HIPAA
vi. Intellectual Property Law
Your PowerPoint presentation must follow these formatting requirements:
Include a title slide, six to eight (6-8) main body slides, and a conclusion slide. 
 
Points: 100
Term Paper: Security Regulation Compliance
Criteria
 
Unacceptable
Below 60% F
Meets Minimum Expectations
60-69% D
 
Fair
70-79% C
 
Proficient
80-89% B
 
Exemplary
90-100% A
Section 1: Written Paper
1a. Provide an overview that will be delivered to senior management of regulatory requirements the agency needs to be aware of.
1ai. Include an overview covering FISMA.
Weight: 5%
Did not submit or incompletely included an overview covering FISMA.
Insufficiently included an overview covering FISMA.
Partially included an overview covering FISMA FISMA.
Satisfactorily included an overview covering FISMA.
Thoroughly included an overview covering FISMA.
1aii. Include an overview covering Sarbanes-Oxley Act.
Weight: 5%
Did not submit or incompletely included an overview covering Sarbanes-Oxley Act.
Insufficiently included an overview covering Sarbanes-Oxley Act.
Partially included an overview covering Sarbanes-Oxley Act.
Satisfactorily included an overview covering Sarbanes-Oxley Act.
Thoroughly included an overview covering Sarbanes-Oxley Act.
1aiii. Include an overview covering Gramm-Leach-Bliley Act.
Weight: 5%
Did not submit or incompletely included an overview covering the Gramm-Leach-Bliley Act.
Insufficiently included an overview covering the Gramm-Leach-Bliley Act.
Partially included an overview covering the Gramm-Leach-Bliley Act.
Satisfactorily included an overview covering the Gramm-Leach-Bliley Act.
Thoroughly included an overview covering the Gramm-Leach-Bliley Act.
1aiv. Include an overview covering PCI DSS.
Weight: 5%
Did not submit or incompletely included an overview covering PCI DSS.
Insufficiently included an overview covering PCI DSS.
Partially included an overview covering PCI DSS.
Satisfactorily included an overview covering PCI DSS.
Thoroughly included an overview covering PCI DSS.
1av. Include an overview covering HIPPA.
Weight: 5%
Did not submit or incompletely included an overview covering HIPPA.
Insufficiently included an overview covering HIPPA.
Partially included an overview covering HIPPA.
Satisfactorily included an overview covering HIPPA.
Thoroughly included an overview covering HIPPA.
1avi. Include an overview covering the Intellectual Property Law.
Weight: 5%
Did not submit or incompletely included an overview covering the Intellectual Property Law.
Insufficiently included an overview covering the Intellectual Property Law.
Partially included an overview covering the Intellectual Property Law.
Satisfactorily included an overview covering the Intellectual Property Law.
Thoroughly included an overview covering the Intellectual Property Law.
1b. Describe the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.

Weight: 15%
Did not submit or incompletely described the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.



Insufficiently described the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.



Partially described the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.



Satisfactorily described the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.
Thoroughly described the security methods and controls that need to be implemented in order to ensure compliance with these standards and regulatory requirements.
1c. Describe the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
Weight: 10%
Did not submit or incompletely described the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
Insufficiently described the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
Partially described the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
Satisfactorily described the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
Thoroughly described the guidance provided by the Department of Health and Human Services, the National Institute of Standards and Technology (NIST), and other agencies for ensuring compliance with these standards and regulatory requirements.
1d. 5 references
Weight: 5%
No references provided
Does not meet the required number of references; all references poor quality choices.
Does not meet the required number of references; some references poor quality choices.
Meets number of required references; all references high quality choices.
Exceeds number of required references; all references high quality choices.
1e. Clarity, writing mechanics, and formatting requirements
Weight: 10%
More than 8 errors present
7-8 errors present
5-6 errors present
3-4 errors present
0-2 errors present