Write a 3-page paper (750 to 825 words), double-spaced, in APA format focused on a sample set of security policies for ICSs/SCADA systems. [MO2.3]

Instructions

Using the ICS/SCADA system organization depicted in Written Assignment 1, create a sample set of three security policies for this system (only one policy per page).

Review Section 4.4 and Appendix G of NIST Special Publication 800-82: Guide to Industrial Control Systems (ICS) Security for recommendations on ICS/SCADA system policy suggestions.

Using the SANS website, select a template for each of the three policies that you will customize for your system. Use a template only from the Network Security and/or Server Security options.

Then, create a sample set of three security policies using the template(s) appropriate to the system organization you are depicting. At a minimum, be sure to include the following sections:

Overview

Purpose

Scope

Policy

Policy Compliance

Note: Each policy should make sense in terms of providing additional security to the ICSs/SCADA systems.

Submit the paper to your mentor for grading.

Use the Add Submission button below to submit your assignment.

Grading criteria

Security policy (#1)

You create a comprehensive security policy that can provide superior system security.

You create a security policy that can provide reliable system security.

You create an incomplete security policy that can provide limited system security.

You create a flawed security policy that can provide little (if any) system security.

null

Security policy (#2)

You create a comprehensive security policy that can provide superior system security.

You create a security policy that can provide reliable system security.

You create an incomplete security policy that can provide limited system security.

You create a flawed security policy that can provide little (if any) system security.

null

Security policy (#3)

You create a comprehensive security policy that can provide superior system security.

You create a security policy that can provide reliable system security.

You create an incomplete security policy that can provide limited system security.

You create a flawed security policy that can provide little (if any) system security.

null

Content development

You use carefully chosen authoritative and compelling content that demonstrates mastery of the subject.

You use appropriate and relevant content that demonstrates sufficient command of the subject.

You use somewhat appropriate content that demonstrates limited command of the subject.

You use inappropriate and irrelevant content.

null

Expectations/completeness

You effectively fulfill the length requirement for the writing assignment, thoroughly address all assignment criteria, and fully develop and explore concepts.

You fulfill the length requirement for the writing assignment and sufficiently address assignment criteria and explore concepts.

You minimally fulfill the length requirement for the writing assignment and incompletely address assignment criteria and explore concepts.

You do not fulfill the length requirement for the writing assignment and inadequately address assignment criteria and explore concepts.

null

Mechanics

You write in complete, well-constructed sentences with faultless grammar, word choice, punctuation, and spelling; writing is sharp, coherent, and demonstrates sophisticated clarity.

You write in complete sentences with mostly correct grammar, word choice, punctuation, and spelling; minor errors may exist but do not compromise meaning.

You write in unclear sentences with significant errors in grammar, word choice, punctuation, and spelling that may compromise meaning.

You write in incomplete, incomprehensible sentences filled with serious errors in grammar, word choice, punctuation, or spelling.

null

APA format

You use APA format accurately and consistently.

You use APA format with minor violations.

You demonstrate an incomplete knowledge of APA format.

You do not use APA format.

null