Now that you have studied about professional and ethical early childhood practices, it is time to determine which of those practices are most important to you and why. In Part 1 of this project, you will create a three-page handout describing the professional and ethical practices to which staff members in your program should adhere. In Part 2 you will create a professional development plan and discuss your career goals. Part 1: Professional GuidelinesImagine that you manage an early childhood program with several employees. You will create and distribute an employee handout, informing them of what professional guidelines they must follow.For this part of the assignment, create a three-page employee handout that includes the following:List five guidelines and examples of professional and courteous practices/behavior for early learning settings. Explain specific reasons why these are important in maintaining ethical and collaborative practices.Discuss professional and fair ramifications for the absence of professional and courteous behavior.Describe expected collaborative practices and employee contributions to team efforts.Include a reflective, yet professionally written, statement that explains two ways you will model and demonstrate professional behavior on a regular basis with your employees.Part 2: Professional and Personal GoalsFor this part of the assignment, you will create an individual professional development plan that consists of professional and personal goals related to your career development/skill acquisition as an early childhood practitioner.In a minimum of two pages, create your professional development plan. Include the following:Identify two professional goals and two personal goals related to your career development as an early childhood practitioner. Consider your chosen specialty when creating your goals.Include the following for each goal: List the steps toward achieving each goal or acquiring each skill. Include target dates for accomplishing each goal.Identify a local, national, or distance/web-based training resource for each goal. Include a brief summary of how each resource could help you.Address the following: The skills and knowledge you currently have either professionally or personally. Consider the six Transferable Skills when you assess your knowledgeWhat you want to learn and how it will benefit you or the children/families you work withHow you will assess your progress and knowledge/skill acquisition

Project #2: Manager’s Deskbook Company Background & Operating Environment Use the assigned case study for information about “the company.” Policy Issue & Plan of Action The Manager’s Deskbook contains issue specific policies and implementation procedures which are required to mitigate risks to the company and to otherwise ensure good governance of the company’s operations. The Chief Information Security Officer (CISO) and key CISO staff members held a kick-off meeting last week to identify issue specific policies which should be added to the company’s policy system in the IT Governance category. The policies will be disseminated throughout the company by incorporating them into the Manager’s Deskbook. The required issue specific policies are: Data Breach Response PolicyPreventing / Controlling Shadow IT PolicyManagement and Use of Corporate Social Media Accounts PolicyCorporate Domain Name Management PolicyWebsite Governance Policy For the purposes of this assignment, you will create a policy recommendations briefing package (containing an Executive Summary and draft policies) and submit that to your instructor for grading. Note: In a “real world” environment, the policy recommendations briefing package would be submitted to the IT Governance board for discussion and vetting. After revisions and voting, a package containing the accepted policies would be sent to all department heads and executives for comment and additional vetting. These comments would be combined and integrated into the policies and sent out for review again. It usually takes several rounds of review and comments before the policies can be sent to the Chief of Staff’s office for forwarding to the Corporate Governance Board. During the review & comments period, the policies will also be subjected to a thorough legal review by the company’s attorneys. Upon final approval by the Corporate Governance Board, the policies will be adopted and placed into the Manager’s Deskbook. This entire process can take 9 to 12 months, if not longer. Your Task Assignment As a staff member supporting the CISO, you have been asked to research and then draft an issue specific policy for each of the identified issues. These policies are to be written for MANAGERS and must identify the issue, explain what actions must be taken to address the issue (the company’s “policy”), state the required actions to implement the policy, and name the responsible / coordinating parties (by level, e.g. department heads, or by title on the organization chart). After completing your research and reviewing sample policies from other organizations, you will then prepare an “approval draft” for each issue specific policy. The purpose of each issue specific policy is to address a specific IT governance issue that requires cooperation and collaboration between multiple departments within an organization. Each issue specific policy should be no more than two typed pages in length (single space paragraphs with a blank line between). You will need to be concise in your writing and only include the most important elements for each policy. You may refer to an associated “procedure” if necessary, e.g. a Procedure for Requesting Issuance of a Third Level Domain Name (under the company’s Second Level Domain name) or a Procedure for Requesting Authorization to Establish a Social Media Account. Your “approval drafts” will be combined with a one page Executive Summary (explaining why these issue specific policies are being brought before the IT Governance Board). Research: Review NIST’s definition of an “Issue Specific Policy” and contents thereof (NIST SP 800-14 p. 14)Review the weekly readings and resource documents posted in the classroom. Pay special attention to the resources which contain “issues” and “best practices” information for:Review NIST guidance for required / recommended security controls If required, find additional sources which provide information about the IT security issues which require policy solutions. Data Breach ResponsePreventing / Controlling Shadow ITSocial Media Corporate Domain Name ManagementWebsite GovernanceNIST SP 800-53 Access Control (AC) control family (for Social Media policy)NIST SP 800-53 Incident Response (IR) control family (for Data Breach policy) NIST SP 800-53 System and Services Acquisition (SA) control family (Domain Name, Shadow IT, Website Governance) Write: Prepare briefing package with approval drafts of the two IT related policies for the Manager’s Deskbook. Your briefing package must contain the following:Use a professional format for your policy documents and briefing package. Your policy documents should be consistently formatted and easy to read.Common phrases do not require citations. If there is doubt as to whether or not information requires attribution, provide a footnote with publication information or use APA format citations and references.You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. Executive Summary“Approval Drafts” forData Breach Response PolicyPreventing / Controlling Shadow IT PolicyManagement and Use of Corporate Social Media Accounts PolicyCorporate Domain Name Management PolicyWebsite Governance Policy As you write your policies, make sure that you address IT and cybersecurity concepts using standard terminology.Executive Summary for the Policy Briefing Package10 pointsThe Executive Summary provided an excellent summary of the policy package's purpose and contents. Information about the case study company was well integrated into the summary. Each policy was individually introduced and clearly explained. The material was well organized and easy to read.8.5 pointsThe Executive Summary provided an outstanding summary of the policy package's purpose and contents. Information about the case study company was integrated into the summary. Each policy in the briefing package was individually introduced and briefly explained. The material was well organized and easy to read.7 pointsThe Executive Summary provided an acceptable overview of the contents of the policy package. Information about the case study company was used in the summary. Each policy in the briefing package was named and briefly explained.6 pointsThe Executive Summary provided an overview of the policy package. Information about the case study company was mentioned.4 pointsAn executive summary was provided but lacked details as to the purpose and contents of the policy package.(Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.Data Breach Response PolicyExcellentOutstandingAcceptableNeeds ImprovementNeeds Significant ImprovementMissing or UnacceptablePolicy Introduction10 pointsThe Data Breach Response policy contained an excellent introduction which clearly identified the policy issue and then addressed five or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments. The introduction clearly and concisely presented the major reasons why the company must have this policy.8.5 pointsThe Data Breach Response policy contained an outstanding introduction which clearly identified the policy issue and addressed three or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments. The introduction addressed the reasons why the company must have this policy.7 pointsThe introduction for the Data Breach Response policy identified the policy issue and addressed three or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments. The introduction mentioned at least one reason why the company must have this policy.6 pointsThe introduction to the Data Breach Response policy mentions the case study company and why the policy is required.4 pointsThe Data Breach Response policy was built from a sample template or list of "recommended" contents without customization for the case study company. (Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.Policy Content20 pointsThe body of the policy provided an excellent description of the actions required to create and implement a data breach response plan. The policy identified the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was clear, concise, easy to understand, and appropriately organized.18 pointsThe body of the policy provided an outstanding description of the actions required to create and implement a data breach response plan. The policy identified the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was easy to understand, and appropriately organized.16 pointsThe body of the policy addressed the actions required to create and implement a data breach response plan. The policy identified the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. 14 pointsThe body of the policy identified most of the required actions for implementing data breach response and mentioned responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures.10 pointsThe policy was disorganized and difficult to understand. OR, inappropriate or excessive copying from other authors' work.0 pointsNo work submitted.Shadow IT PolicyExcellentOutstandingAcceptableNeeds ImprovementNeeds Significant ImprovementMissing or UnacceptablePolicy Introduction10 pointsThe Shadow IT Policy contained an excellent introduction which addressed three or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments and addressed the reasons why employees must comply with this policy. Compliance requirements are addressed and contact information is provided for questions about the policy.8.5 pointsThe Shadow Policy contained an outstanding introduction which addressed two or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments and addressed the reasons why employees must comply with this policy. Compliance requirements are addressed and contact information is provided for questions about the policy.7 pointsThe introduction for the Shadow IT Policy was customized for the case study company. One or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments were incorporated into the policy. Compliance requirements were addressed.6 pointsThe introduction to the Shadow IT Policy mentions the case study company and compliance requirements.4 pointsThe Shadow IT was built from a sample template or list of "recommended" contents without customization for the case study company. (Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.Policy Content15 pointsThe body of the policy provided an excellent description of the required actions, the responsible parties, compliance requirements including audits, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was clear, concise, easy to understand, and appropriately organized.13.5 pointsThe body of the policy provided an outstanding description of the required actions, the responsible parties, compliance requirements including audits, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was easy to understand and appropriately organized.12 pointsThe body of the policy provided an acceptable description of the required actions. The policy mentioned at least two of the following: the responsible parties, compliance requirements including audits, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was easy to understand and appropriately organized.9 pointsOrganization and appearance need improvement. The Shadow IT policy mentioned compliance requirements for approval to purchase IT hardware, software, and services.6 pointsThe Shadow IT Policy was disorganized and difficult to understand. OR, the policy was significantly lacking in content. (Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.Social Media Accounts PolicyExcellentOutstandingAcceptableNeeds ImprovementNeeds Significant ImprovementMissing or UnacceptablePolicy Introduction5 pointsThe Social Media Accounts policy contained an excellent introduction which addressed five or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments and addressed the reasons why employees must comply with this policy.4 pointsThe Social Media Accounts policy contained an outstanding introduction which addressed three or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments and addressed the reasons why employees must comply with this policy.3 pointsThe introduction for the Social Media Accounts policy was customized for the case study company. Three or more specific characteristics of the company's business, legal & regulatory, and/or enterprise IT environments were incorporated into the policy.2 pointsThe introduction to the Social Media Accounts policy mentions the case study company and why the policy is required.1 pointThe policy was built from a template or list of "best practices" with no customization for the case study company. (Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.Policy Content10 pointsThe body of the policy provided an excellent description of the required actions, the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy addressed all required actions listed in the assignment. The policy was clear, concise, easy to understand, and appropriately organized.8.5 pointsThe body of the policy provided an outstanding description of the required actions (as listed in the assignment), the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy. The policy was clear, easy to understand, and appropriately organized.7 pointsThe body of the policy identified the required actions (as listed in the assignment), the responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures. Contact information is provided for questions about the policy.6 pointsThe body of the policy identified most of the required actions (as listed in the assignment) and mentioned responsible parties, compliance requirements, and sanctions / disciplinary actions for compliance failures.4 pointsThe policy was disorganized and difficult to understand. (Or, inappropriate or excessive copying from other authors' work.)0 pointsNo work submitted.ProfessionalismExcellentOutstandingAcceptableNeeds ImprovementNeeds Significant ImprovementMissing or UnacceptableAddressed security issues using standard terminology5 pointsDemonstrated excellence in the use of standard cybersecurity terminology to support the deliverable. Appropriately used terminology from five or more pillars of IA/IS.4 pointsDeliverable showed an outstanding understanding and integration of standard cybersecurity terminology. Appropriately used terminology from four or more pillars of IA/IS.3 pointsCorrectly used standard cybersecurity terminology in the deliverable. Appropriately used terminology from three or more pillars of IA/IS.2 pointsUsed standard cybersecurity terminology but this usage was not well integrated into the deliverable.1 pointMisused or incorrectly defined cybersecurity terminology.0 pointsDid not integrate standard cybersecurity terminology into the deliverable.Organization & Appearance5 pointsSubmitted work shows outstanding organization and the use of color, fonts, titles, headings and sub-headings, etc. is appropriate to the assignment type.4 pointsSubmitted work has minor style or formatting flaws but still presents a professional appearance. Submitted work is well organized and appropriately uses color, fonts, and section headings (per the assignment’s directions).3 pointsOrganization and/or appearance of submitted work could be improved through better use of fonts, color, titles, headings, etc. OR Submitted work has multiple style or formatting errors. Professional appearance could be improved.2 pointsSubmitted work has multiple style or formatting errors. Organization and professional appearance need substantial improvement.1 pointSubmitted work meets minimum requirements but has major style and formatting errors. Work is disorganized and needs to be rewritten for readability and professional appearance.0 pointsSubmitted work is poorly organized and formatted. Writing and presentation are lacking in professional style and appearance. Work does not reflect college level writing skills. Or, no submission.Execution10 pointsNo word usage, grammar, spelling, or punctuation errors. All quotations (copied text) are properly marked and cited using a professional format (APA format recommended but not required.)8.5 pointsWork contains minor errors in word usage,grammar, spelling or punctuation which do not significantly impact professional appearance. All quotations (copied text) are properly marked and cited using a professional format (APA format recommended but not required.)7 pointsErrors in word usage, spelling, grammar, or punctuation which detract from professional appearance of the submitted work. All quotations (copied text) are properly marked and cited using a professional format (APA format recommended but not required.)6 pointsSubmitted work has numerous errors in word usage, spelling, grammar, or punctuation which detract from readability and professional appearance. Punctuation errors may include failure to properly mark quoted or copied material (an attempt to name original source is required).4 pointsSubmitted work is difficult to read / understand and has significant errors in formatting, spelling, grammar, punctuation, or word usage. Significant errors in presentation of copied text (lacks proper punctuation and failed to attribute material to original source).0 pointsNo work submitted. OR, work contains significant instances of cut-and-paste without proper citing / attribution to the original work or author.Overall ScoreExcellent90 or moreOutstanding80 or moreAcceptable70 or moreNeeds Improvement56 or moreNeeds Significant Improvement36 or moreMissing or Unacceptable Work0 or more