Assignment Prompt & Instructions
Case Study
– 2 years ago
**files (1)**
– ## Module77.docx
**## Module77.docx**
**Module 7: A Case for Hackers**
For this assignment, you will need to review the Case Study presented and
_develop a cybersecurity plan that includes preventative measures to protect against cyber threats._
Expand AllPanels Collapse AllPanels
[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787191?module_item_id=15517163)
Lee Hospital is a large hospital system located in a large metropolitan area, well known for their use of cutting-edge advanced technological tools and patient care services. Several of the departments that are not patient facing allow their employees to work remotely with the exceptions of the annual two-day training event for non-leadership and for specialized training on information systems as needed. The hospital has experienced a significant cyber-attack that halted all operations for several hours when the network went down and exposed patient information. This attack revealed critical weaknesses in Lee Hospital’s cybersecurity infrastructure, including outdated antivirus software, weak password policies and identified that there is not a remote work policy.
[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787191?module_item_id=15517163)
As the Chief Security Officer at Lee Hospital, you have been asked to develop a cybersecurity plan that includes preventative measures to protect against cyber threats.
Steps you will complete the following as part developing your cybersecurity plan include:
1. A risk assessment to determine and prioritize potential cybersecurity threats with 2-4 strategies to mitigate the threats.
2. Accounting for technical safeguards, such as a multi-factor authentication and schedule for routine updates/patches.
3. Outlining a new policy for working remotely that includes the use of a virtual private network to gain access to the employee work hub instead of simply logging into the hospital’s intranet.
Your deliverable method will be in the form one-to-one-and-a-half-page report that outlines each of the cybersecurity plan steps you completed with your recommendations for addressing the threats, technical safeguards and outline of what a remote work policy would include to limit exposing the network to threats. Your report will be double-spaced.
Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.
**This assignment utilizes TurnItIn, which reviews citations, plagiarism, and artificial intelligence (AI) usage.**
**Action**
Select the Start Assignment button to begin.
Once you have uploaded your file, select Submit Assignment.
**Rubric**
**M7 A Case for Hackers**
| | | | |
| — | — | — | — |
| M7 A Case for Hackers |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Report (paper)<br>-Uses standard double-spacing without extra spaces between paragraphs<br>-Minimum length 1 page, maximum length 1.5 pages<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all paper parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable -Uses standard double-spacing without extra spaces between paragraphs -Minimum length 1 page, maximum length 1.5 pages | **5 pts**<br>**In Progress**<br>Student submission mostly meets paper parameters -1-3 grammatical & spelling errors -Uses some APA in-text citations and reference list IF applicable -Is either short or over by 0.25 (1/4) of minimum/maximum page requirement | **2 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable -Is either short or over by 0.5 (1/2) of minimum/maximum page requirement | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 7 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: Risk Assessment<br>Cybersecurity Plan: Risk Assessment<br>-Risk Analysis identifies potential cybersecurity threats<br>-Includes 2-4 strategies to mitigate threats<br>CO7 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly includes -Risk Analysis identifies potential cybersecurity threats -Includes 2-4 strategies to mitigate threats | **6 pts**<br>**In Progress**<br>Student submission mostly identifies the potential cybersecurity threats with strategies to mitigate threats – may be lacking complete strategies | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly identify cybersecurity threats and strategies to mitigate as part of the Risk Assessment | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet the expectations for an assessment of potential cybersecurity threats with mitigation strategies or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: Technical Safeguards<br>Cybersecurity Plan: Technical Safeguards<br>-A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches)<br>CO7 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly identifies the Technical Safeguards with -A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches) | **6 pts**<br>**In Progress**<br>Student submission mostly contains identification of Technical Safeguards with -A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches) | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly provide identification of needed technical safeguards or is incomplete or inaccurate | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations for technical safeguards as part of Cybersecurity Plan or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: New Policy<br>Cybersecurity Plan: New Policy<br>-outlines policy for working remotely<br>-includes requirement of using virtual private network (VPN) for employee secure access<br>CO7 | | | | | |
| — | — | — | — |
| **10 pts**<br>**Meets or Exceeds**<br>Student submission has outlined a new policy for Remote Work that addresses employees utilizing the virtual private network (VPN) for accessing the employee work hub | **7 pts**<br>**In Progress**<br>Student submission contains an outline for the new policy for Remote Work that addresses employees utilizing the virtual private network (VPN) for accessing the employee work hub – this may be missing minor aspects or needs some clarity | **4 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly give a detailed outline for a remote work policy where employees would utilize a virtual private network (VPN) to login and complete their work | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide policy outline for remote work or nothing is submitted | | 10 pts |
| Total Points: 35 |
**## Module77.docx**
**Module 7: A Case for Hackers**
For this assignment, you will need to review the Case Study presented and
_develop a cybersecurity plan that includes preventative measures to protect against cyber threats._
Expand AllPanels Collapse AllPanels
[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787191?module_item_id=15517163)
Lee Hospital is a large hospital system located in a large metropolitan area, well known for their use of cutting-edge advanced technological tools and patient care services. Several of the departments that are not patient facing allow their employees to work remotely with the exceptions of the annual two-day training event for non-leadership and for specialized training on information systems as needed. The hospital has experienced a significant cyber-attack that halted all operations for several hours when the network went down and exposed patient information. This attack revealed critical weaknesses in Lee Hospital’s cybersecurity infrastructure, including outdated antivirus software, weak password policies and identified that there is not a remote work policy.
[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787191?module_item_id=15517163)
As the Chief Security Officer at Lee Hospital, you have been asked to develop a cybersecurity plan that includes preventative measures to protect against cyber threats.
Steps you will complete the following as part developing your cybersecurity plan include:
1. A risk assessment to determine and prioritize potential cybersecurity threats with 2-4 strategies to mitigate the threats.
2. Accounting for technical safeguards, such as a multi-factor authentication and schedule for routine updates/patches.
3. Outlining a new policy for working remotely that includes the use of a virtual private network to gain access to the employee work hub instead of simply logging into the hospital’s intranet.
Your deliverable method will be in the form one-to-one-and-a-half-page report that outlines each of the cybersecurity plan steps you completed with your recommendations for addressing the threats, technical safeguards and outline of what a remote work policy would include to limit exposing the network to threats. Your report will be double-spaced.
Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.
**This assignment utilizes TurnItIn, which reviews citations, plagiarism, and artificial intelligence (AI) usage.**
**Action**
Select the Start Assignment button to begin.
Once you have uploaded your file, select Submit Assignment.
**Rubric**
**M7 A Case for Hackers**
| | | | |
| — | — | — | — |
| M7 A Case for Hackers |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Report (paper)<br>-Uses standard double-spacing without extra spaces between paragraphs<br>-Minimum length 1 page, maximum length 1.5 pages<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all paper parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable -Uses standard double-spacing without extra spaces between paragraphs -Minimum length 1 page, maximum length 1.5 pages | **5 pts**<br>**In Progress**<br>Student submission mostly meets paper parameters -1-3 grammatical & spelling errors -Uses some APA in-text citations and reference list IF applicable -Is either short or over by 0.25 (1/4) of minimum/maximum page requirement | **2 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable -Is either short or over by 0.5 (1/2) of minimum/maximum page requirement | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 7 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: Risk Assessment<br>Cybersecurity Plan: Risk Assessment<br>-Risk Analysis identifies potential cybersecurity threats<br>-Includes 2-4 strategies to mitigate threats<br>CO7 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly includes -Risk Analysis identifies potential cybersecurity threats -Includes 2-4 strategies to mitigate threats | **6 pts**<br>**In Progress**<br>Student submission mostly identifies the potential cybersecurity threats with strategies to mitigate threats – may be lacking complete strategies | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly identify cybersecurity threats and strategies to mitigate as part of the Risk Assessment | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet the expectations for an assessment of potential cybersecurity threats with mitigation strategies or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: Technical Safeguards<br>Cybersecurity Plan: Technical Safeguards<br>-A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches)<br>CO7 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly identifies the Technical Safeguards with -A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches) | **6 pts**<br>**In Progress**<br>Student submission mostly contains identification of Technical Safeguards with -A clear accounting for technical safeguards that are needed (such as multi-factor authentication, routine updates schedule, patches) | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly provide identification of needed technical safeguards or is incomplete or inaccurate | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations for technical safeguards as part of Cybersecurity Plan or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeCybersecurity Plan: New Policy<br>Cybersecurity Plan: New Policy<br>-outlines policy for working remotely<br>-includes requirement of using virtual private network (VPN) for employee secure access<br>CO7 | | | | | |
| — | — | — | — |
| **10 pts**<br>**Meets or Exceeds**<br>Student submission has outlined a new policy for Remote Work that addresses employees utilizing the virtual private network (VPN) for accessing the employee work hub | **7 pts**<br>**In Progress**<br>Student submission contains an outline for the new policy for Remote Work that addresses employees utilizing the virtual private network (VPN) for accessing the employee work hub – this may be missing minor aspects or needs some clarity | **4 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly give a detailed outline for a remote work policy where employees would utilize a virtual private network (VPN) to login and complete their work | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide policy outline for remote work or nothing is submitted | | 10 pts |
| Total Points: 35 |