This assignment focuses on applying an information security management model or standard to mitigate a cybersecurity threat or attack type for a fictitious organization.

$(1)$ Select one cybersecurity threat or attack $-$ for example, ransomware, insider threat.

$(2)$ Pick one information security management model or standard that will be useful to mitigate the cybersecurity threat$/$attack chosen in step $1.($See Chapter $8).$

$(3)$ Apply the selected information security management model or standard in the context of a fictitious organization. You may choose the organization context and type depending upon your interest or familiarity $($Example: Medium$-$sized healthcare organization, large$-$sized financial entity, small defense contractor$).$

$(4)$ Overall, you are expected to present a plan to mitigate the selected cybersecurity threat or attack type for the chosen fictitious organization by applying the security model or standard.

Deliverables:

$(10$ points$)$ Recorded presentation $($along with slide deck$)$ on the selected security model or standard. $(30-45$ minutes; $30-60$ slides$)$

$(10$ points$)$ Recorded presentation $($along with slide deck$)$ on the plan to mitigate the selected cybersecurity threat or attack type for the chosen fictitious organization.

Peer Reviews

This assignment involves peer reviews for the submissions. Here are some best practices for peer review:

Be respectful and constructive: Offer suggestions, not commands.

Don$$t focus your comments exclusively on the weaker parts of your peer$$s work: Identify both the good and less$-$than$-$good components of your peers$$ work and offer concrete solutions for improving the less$-$than$-$good parts.

Be judicious in the amount of feedback you$$re offering to your peers: Focus on the most essential things or the components of your peer$$s work that you think could make the most improvements most efficiently

Be clear: Aim for clarity and precision in your feedback. Quickly asserting that something is $$too vague$$ itself is too vague. What specifically is hard to understand? Share with your peers the different ways you could construe what your peer is trying to present.

Ask questions: Feedback doesn$$t always have to be so assertive. If something isn$$t clear, ask the creator for more elaboration or context.

Your peer put a lot of time and energy into creating the work that you$$re reviewing: You should aim to respect that time and energy by committing the same time and energy providing thoughtful feedback.