CYB 260 Project One Guidelines and Rubric Privacy Perspective Overview In 2017, internet traffic was generated at a rate of 3,138,420 GB per minute (Domo, n.d.). As the technologies and techniques that are used to collect, catalog, and analyze the growing amounts of data become more powerful and widespread, the data we generate will play a progressively more important role economically, socially, and personally. With the expansion in the quantity and the possible uses of personal data, the risk to privacy has likewise risen drastically. The difficulty of categorizing information as public versus private (given specific contexts) and the elevated costs associated with the preservation of privacy only make the issue more complex. For this project, you will take a stakeholder role in a business on the forefront of a privacy issue. You will need to articulate a point of view that reflects your professional stance on privacy, the laws relevant to the issue, and the business implications of your recommendation. The project incorporates one milestone, which will be submitted in Module Three. The project will be submitted in Module Five. In this assignment, you will demonstrate your mastery of the following course competency:  Articulate an informed position on contemporary issues of privacy and its relation to organizational mission Scenario In a previous module, your instructor provided you with the scenario that you used for the Project One Milestone. You will continue your analysis of this scenario for this project. You will situate yourself as an executive-level security consultant with the primary responsibility of advising senior management in cybersecurity matters. As a member of the internal stakeholder board for the proposal presented in the scenario, you will be able to offer essential input. Based on the information and resources from the scenario and your work from the milestone, prepare a memorandum to the internal stakeholder board specifying your position on the acceptability of the proposal in the scenario. Prompt You must address the critical elements listed below. The codes shown in brackets indicate the course competency to which each critical element is aligned. In a memo to the internal stakeholder board, defend your position on the proposed partnership. Your memo should address the balancing of privacy from the security practitioner's perspective alongside the corporate mission and business goals. 1 In your memo, be sure to address the following questions: I. Are the privacy laws sufficient to ensure that the sharing and use of data will meet the fair information practice principles of the organization? [CYB-260-02] II. What are the minimum privacy safeguards you would recommend be in place for the individuals’ control over their data? [CYB-260-02] III. In your opinion, is the proposal a good decision for the organization? Weigh the privacy considerations from a security practitioner’s perspective as well as the corporate mission and business goals in justifying your position. [CYB-260-02] Project One Rubric Guidelines for Submission: Your submission should be 1 to 3 pages in length and should use double spacing, 12-point Times New Roman font, and one-inch margins. Sources should be cited according to APA style.

CYB 200 Project Two Guidelines and Rubric Overview This project is the creation of an incident analysis brief for your manager. Regardless of the level of protection and prevention an organization has in place, cybersecurity incidents occur. It is the response to the incident that may make or break an organization. As you progress through your degree, you will build your skills to prepare for all stages of incident response: preparation, detection and analysis, containment, eradication and recovery, and post-incident activity. A critical aspect of incident response is the ability to use information gained from an incident to improve the organization’s security posture. The insight gained helps security professionals develop solutions that reduce the likelihood of similar incidents in the future while balancing the potential negative impacts those solutions will have on the people, processes, and technologies they ultimately affect. In this project, you will examine an incident that has occurred and use the Fundamental Security Design Principles to develop recommendations that will protect the organization in the future. In this assignment, you will demonstrate your mastery of the following course competency: ? CYB-200-03: Describe fundamental principles of cybersecurity Scenario In a course announcement, your instructor will provide you with a scenario on which your work will be based. You will situate yourself as the security analyst in one of the provided scenarios, creating an incident analysis brief that explains to the security/IT director how the Fundamental Security Design Principles can be applied to strengthen the organization’s security posture following the incident described in the case. You do not require specific technical information from the system beyond those supplied for you within the scenario. Rather, you should address each critical element in the Project Two prompt, speaking broadly to what your analysis and recommendations would be, based on your research from the course materials collected in previous modules. Prompt Using evidence from the scenario, prepare an incident analysis brief for your manager. In your brief, you should limit your analysis by selecting one security objective and two Fundamental Security Design Principles from the table below. Security Objective (Choose One) Fundamental Security Design Principles (Choose Two) ? Confidentiality ? Integrity ? Availability ? Separation (of domains/duties) ? Isolation ? Encapsulation 1  ? Modularity ? Simplicity of design (economy of mechanism) ? Minimization of implementation (least common mechanism) ? Open design ? Complete mediation ? Layering (defense in depth) ? Least privilege ? Fail-safe defaults/fail secure ? Least astonishment (psychological acceptability) ? Minimization of trust surface (reluctance to trust) ? Usability ? Trust relationships Specifically, you must address the critical elements listed below. Most of the critical elements align with a particular course competency, shown in brackets. I. Scenario Analysis: Using your work in the case study analyses (Modules Two through Four) and other course resources as reference, select the security objective you think is most relevant to the organization in the case. A. Describe why the loss of your selected security objective (confidentiality, integrity, or availability) reflects the greatest overall negative impact on the organization. Use evidence from the scenario and your coursework to support your selection. B. Summarize the negative impacts on people, processes, and technologies associated with the loss of your selected security objective. II. Recommendations: Select two Fundamental Security Design Principles as criteria, and recommend solutions to remedy the loss of the selected security objective based on your assessment of the incident. A. Explain how your solution implements the selected Fundamental Security Design Principles. Provide evidence from the scenario and your coursework to support your selections. B. Describe how your solution balances impacts on people, processes, and technologies. C. Explain which aspect of your solution you would recommend