CYB 200 Project Two Guidelines and Rubric Overview This project is the creation of an incident analysis brief for your manager. Regardless of the level of protection and prevention an organization has in place, cybersecurity incidents occur. It is the response to the incident that may make or break an organization. As you progress through your degree, you will build your skills to prepare for all stages of incident response: preparation, detection and analysis, containment, eradication and recovery, and post-incident activity. A critical aspect of incident response is the ability to use information gained from an incident to improve the organization’s security posture. The insight gained helps security professionals develop solutions that reduce the likelihood of similar incidents in the future while balancing the potential negative impacts those solutions will have on the people, processes, and technologies they ultimately affect. In this project, you will examine an incident that has occurred and use the Fundamental Security Design Principles to develop recommendations that will protect the organization in the future. In this assignment, you will demonstrate your mastery of the following course competency: ? CYB-200-03: Describe fundamental principles of cybersecurity Scenario In a course announcement, your instructor will provide you with a scenario on which your work will be based. You will situate yourself as the security analyst in one of the provided scenarios, creating an incident analysis brief that explains to the security/IT director how the Fundamental Security Design Principles can be applied to strengthen the organization’s security posture following the incident described in the case. You do not require specific technical information from the system beyond those supplied for you within the scenario. Rather, you should address each critical element in the Project Two prompt, speaking broadly to what your analysis and recommendations would be, based on your research from the course materials collected in previous modules. Prompt Using evidence from the scenario, prepare an incident analysis brief for your manager. In your brief, you should limit your analysis by selecting one security objective and two Fundamental Security Design Principles from the table below. Security Objective (Choose One) Fundamental Security Design Principles (Choose Two) ? Confidentiality ? Integrity ? Availability ? Separation (of domains/duties) ? Isolation ? Encapsulation 1  ? Modularity ? Simplicity of design (economy of mechanism) ? Minimization of implementation (least common mechanism) ? Open design ? Complete mediation ? Layering (defense in depth) ? Least privilege ? Fail-safe defaults/fail secure ? Least astonishment (psychological acceptability) ? Minimization of trust surface (reluctance to trust) ? Usability ? Trust relationships Specifically, you must address the critical elements listed below. Most of the critical elements align with a particular course competency, shown in brackets. I. Scenario Analysis: Using your work in the case study analyses (Modules Two through Four) and other course resources as reference, select the security objective you think is most relevant to the organization in the case. A. Describe why the loss of your selected security objective (confidentiality, integrity, or availability) reflects the greatest overall negative impact on the organization. Use evidence from the scenario and your coursework to support your selection. B. Summarize the negative impacts on people, processes, and technologies associated with the loss of your selected security objective. II. Recommendations: Select two Fundamental Security Design Principles as criteria, and recommend solutions to remedy the loss of the selected security objective based on your assessment of the incident. A. Explain how your solution implements the selected Fundamental Security Design Principles. Provide evidence from the scenario and your coursework to support your selections. B. Describe how your solution balances impacts on people, processes, and technologies. C. Explain which aspect of your solution you would recommend

Chapter Readings Reflections Journal  As you develop and move through this course it is important that you are able to reflect on, report and assess your learning throughout your educational journey, using weekly reflection papers. Your reflection journal is due at the end of weeks 2, 4, 6 and 8 during this course.  All weekly reflection papers should be a minimum of two full pages of prose (for each chapter), double-spaced, in proper APA formatting using citations when appropriate.   Please use Microsoft Word for all writing assignments. Each Chapter Reading Reflection should address the following prompts: Summarize the content of the chapter addressed.  What were some of the highlights in this chapter and learning opportunities? Share some new ideas and/or thoughts that you developed from the reading of the chapter. How do you think you can apply this chapter’s concepts into your home, school, personal-life or work environment?