UTPB-COSC-4470-Project1

This repo contains the assignment and provided resources for Project 1 of the Applied Network Security class.

Project Goals:

1. Gain experience with writing some common types of policy documents.
2. Gain experience working in a group setting on collaboratively writing good policy.
3. Gain experience in the process of iteratively writing policy and seeking approval, then incorporating feedback into the next draft.

Description:

Each group will be assigned both a general policy meant for all or most employees to read and sign, and a specific policy meant for a small team to implement and enforce. We will do multiple rounds of submittal and response until a final version of each policy is approved.

Grading Criteria:

Each group will be expected to participate in the approval process. This means that alpha drafts must be provided for assessment by the first deadline, and beta drafts must be prepared and made available by the second deadline.

I will provide commentary on each draft, which should be addressed within the subsequent draft of each document. The documents will be downloaded in whatever form they exist upon arrival of the third deadline, and I will perform a final assessment from those versions. Teams which fail to submit an alpha document or make meaningful changes to the beta draft following feedback will lose ten points. Obviously, if no document is provided by the final deadline, fifty points will be deducted for each missing document.

Your final policy documents will be assessed along most of the attributes discussed in class, specifically:

• Structure
• Clarity and Consistency/Readability
• Specificity
• Relevance
• Comprehensiveness
• Enforceability
• Flexibility/Scalability
• Measurability

Your submitted documents should exhibit all of these qualities to a reasonable degree. Documents which fail to meet these requirements will have points deducted.

Deliverables:

Each group will produce two policy documents. Examples of similar documents are usually between about ten and thirty pages in length, but there are no minimum or maximum length requirements within the context of this class. Instead, endeavor to follow the structural and stylistic guidelines to the best of your abilities.

Group Assignments:

The assignments of topics to each group are as follows:

Group 1

• Remote Work
• Physical Security

Group 2

• BYOD
• Incident Response

Group 3

• Acceptable Use
• Network and Data Security

Due Dates:

• The alpha drafts are due on March 7th at 23:59:59.
• The beta drafts are due on April 11th at 23:59:59.
• Final drafts will be downloaded from your github repos on May 9th at 23:59:59.