Case Study #3: Is there a cybersecurity workforce crisis in state governments??

Case Scenario:

A membership organization for state government officials has asked your cybersecurity consulting firm to partner with it in developing a one-day workshop on workforce development needs for cybersecurity workers. Your part in this endeavor is to provide the coordinating committee with a position paper which discusses the question: “Is there a cybersecurity workforce crisis in state governments? Your paper should be no more than 3 pages in length and must address both sides of the question (“yes, there is a crisis” and “no, there is not a crisis”).

Research:

1.  Read / Review the Week 5 readings.

2.  Research authoritative sources which support the “Yes” side of the question. Here are several sources to help you get started:

a. http://www.pewtrusts.org/en/research-and-analysis/blogs/stateline/2015/5/11/hiring-cybersecurity-staff-is-hard-for-states

b. http://www.nga.org/files/live/sites/NGA/files/pdf/2014/1410TheCybersecurityWorkforce.pdf

c.   Comparing Private Sector and Government Worker Salaries http://reason.org/news/show/public-sector-private-sector-salary  (This source argues both sides of the compensation / education arguments.)

3.  Research authoritative sources which support the “No” side of the question. For example, states may have a shortage of workers overall. Or, the lack of competitive compensation claim may be inaccurate. Or, you may find that the shortage of cybersecurity workers is unrelated to the type of employer (that is, everyone is having problems finding qualified personnel).

a. Budgetary Constraints (p. 3, Figure 1.4) http://www.csg.org/knowledgecenter/docs/ta0210workshortage.pdf

b.  IT Workforce hiring issues: http://www.nascio.org/publications/documents/NASCIO_ITWorkforce_UnderPressure.pdf

c.  State vs Private Compensation (see “Conclusions” on p. 15) https://www.aei.org/wp-content/uploads/2014/04/-biggs-overpaid-or-underpaid-a-statebystate-ranking-of-public-employee-compensation_112536583046.pdf

d.  Global talent gap http://thehill.com/blogs/congress-blog/technology/239113-cybersecurity-talent-worse-than-a-skills-shortage-its-a

4.  Review the best practice recommendations from the NICE report. Select three to five best practices which state governments could benefit from implementing. http://niccs.us-cert.gov/sites/default/files/documents/files/BestPracticesforPlanningaCybersecurityWorkforce_062813_v4.2_FINAL_NICEbranded_0.pdf

5.  Review alternative recommendations for attracting and retaining qualified talent (workers) to a state or region. Select 3 or more which you believe would be beneficial for state government hiring efforts for cybersecurity personnel.

a. About Good Neighbor Next Door (ask yourself if this program or something similar should be extended to cybersecurity personnel) http://portal.hud.gov/hudportal/HUD?src=/program_offices/housing/sfh/reo/goodn/gnndabot

b. Attracting Big Talent to Small Cities http://www.hreonline.com/HRE/view/story.jhtml?id=534358095

c. 7 Ways to Attract and Retain Talent (without having to compete on salaries) http://www.oyginc.com/articles/attractarticle1/ 

d. Government Needs to Rethink How They Attract IT Talent http://www.governing.com/columns/tech-talk/gov-remaking-your-workforce.html

Write:

Write a two to three page summary of your research. At a minimum, your summary must include the following:

1.  An introduction or overview of the cybersecurity workforce issues which impact State governments. This overview should address the political, economic, socio-cultural (included education), and technological factors which contribute to the perceived lack of qualified cybersecurity workers. This introduction should be suitable for an executive audience.

2.  A separate section which addresses three to five specific reasons why states have difficulty hiring a sufficient number of trained and qualified cybersecurity workers for positions in state agencies and offices.

3.  A separate section which addresses three to five specific “non-cybersecurity” reasons why a workforce shortage affecting state governments may currently exist. You may also choose to argue that the workforce shortage arises out of state budget problems rather than training and education or salary.

4.  A recommendations section which addresses three to five marketing or hiring actions which state governments could take to attract cybersecurity talent and reduce or alleviate a cybersecurity workforce shortage for trained and qualified cybersecurity personnel. These recommendations should include several alternative practices which deemphasize salary.

Your white paper should use standard terms and definitions for cybersecurity and privacy. The following sources are recommended:

· NICCS Glossary http://niccs.us-cert.gov/glossary

· Guidelines on Security and Privacy in Public Cloud Computing http://csrc.nist.gov/publications/nistpubs/800-144/SP800-144.pdf

Formatting Instructions

1.  Use standard APA formatting for the MS Word document that you submit to your assignment folder. Formatting requirements and examples are found under Course Resources > APA Resources.

Additional Information

1.  You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. These items are graded under Professionalism and constitute 20% of the assignment grade.

2.  You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must comply with APA 6th edition Style requirements. Failure to credit your sources will result in penalties as provided for under the university’s Academic Integrity policy.

Section 1: Microsoft Word 

Section 2: Microsoft Project

This assignment contains two (2) deliverables: a summary document to be delivered in a word processor document format and a Work Breakdown Structure (WBS) to be delivered in a project file.

Overview:

Imagine that you work as the project manager for an IT department. Your organization has recently approved the development of a mobile application. As the project manager, you will manage the development of the project. The project will include user experience (UX) design by a consultant, graphic design by a team of two contracted designers, and in-house application development by a team of three (3) programmers and a database developer. 

Deliverable 1: Summary (MS Word or open source equivalent)

1. Write a one to two (1-2) page summary document in which you:
   1. Summarize the project requirements and other assumptions (i.e., budget, human resources, workload, environmental dependencies, etc.). 
   2. Define a work breakdown structure and describe the methodology behind constructing one. 

Deliverable 2: WBS (MS Project or open source equivalent)

1. Use Microsoft Project or an open source equivalent to create a WBS which addresses the following:
   1. Contain at least five (5) main tasks, one (1) for each of the PMBOK® process areas. 
   2. Contain at least thirty (30) line items distributed in five (5) or more work packages. 
   3. Contain Work Breakdown Structure Code for each task.
   4. Present duration estimates for each task that results in a duration estimate for the project not to exceed the requirements described in the overview. 

Deliverable one (1) of your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:

• Explain and apply the phases of the project management life cycle.
• Develop processes that initiate technology projects, including project selection and defining project scope.
• Analyze and develop project schedules with appropriate techniques and software tools.
• Use technology and information resources to research issues in information systems and technology.
• Write clearly and concisely about Information Technology Project Management topics using proper writing mechanics and technical style conventions.

prepare a 10- to 15-minute oral presentation (presenter notes are the oral presentation), accompanied by a 10- to 12-slide Microsoft® PowerPoint®presentation in which you analyze measures of cognitive functioning. Provide 3-4 scholarly references. Use APA format when completing presenter notes.  Address the following items in your presentation:

• Describe at least two theories of intelligence.
• Compare and contrast the constructs and measures of intelligence and achievement.

Online Campus students must submit a 10- to 12-slide Microsoft® PowerPoint® presentation with speaker notes.

What is needed is only three slides on One specific Theory of Intelligence all must be cited correctly. at least a 150 word minimum on each side.   And at least 1 Scholarly reference.

Q1. Pick one of the items below for your Original Post in this week’s discussion forum:

· Why do policies need to be clearly worded? What happens if they’re not, they are confusing, or if they are too “legalese?”  Provide at least one example supporting your points.

· Why do policy documents need to address the six key questions: who, what, where, when, why, and how?  What is the potential result if they do not? Provide at least one example supporting your points.

· Describe the policy review and approval process.  Who needs to be involved and why?  Include how this process works for an organization.

· Explain different methods for publishing policy documents. How and where should policies be stored?  Why is it important to formally publish and publicize them? 

· Explain the purpose of a policy change control board. Include why it’s important to have oversight of the policy development process.

· Describe the business drivers for changing policy documents.  When, why, and how would these prompt a change?

· Explain different organizational challenges when implementing policies. How can they be overcome?

· Why should a security policy implementation be flexible to allow for updates?  What can happen if it’s not?

· Fully explain why an organization should have annual awareness training for organizational policies. Include costs and benefits.

· Describe two methods for conducting policy awareness training.

Requirement: One Page

Deadline: 15 Hours

Q2. In this assignment, you are to create a security management policy that addresses the management and the separation of duties throughout the seven domains of a typical IT infrastructure. You are to define what the information systems security responsibility is for each of the seven domains of a typical IT infrastructure. From this definition, you must incorporate a definition for the separation of duties into the Procedures section of the policy definition template that you will fill out later in this step. The company that’s the subject of this case study is Five Fourths Bank:

· Five Fourths Bank is a regional Bank that has multiple branches and locations throughout the area.

· Bank Management made the strategic decision to focus on online banking and use of the Internet.

· The bank prides itself on its customer service department and their ability to quickly answer customer questions.

· The organization needs to be in compliance with the Gramm-Leach-Bliley Act (GLBA), FS-ISAC, and IT best practices regarding its employees.

· The organization wants to monitor and control use of the Internet by implementing web content filtering.

· The organization wants to eliminate personal use of organization-owned IT assets and systems. However, they allow BYOD to attach to their guest wireless network.

· The organization wants to monitor and control use of messaging systems by implementing e-mail security controls.

· The bank wants to implement this policy for all its IT assets and to incorporate a policy review process into its annual awareness training.

· The organization wants to define a policy framework, including a security management policy defining the separation of duties for information systems.

Using the templates in your Security Policy text (pp.185-190), create the IT policy, standard, guideline, and procedure for Five Fourths Bank regarding the use of personal devices (cell phones, tablets, home computers, etc.).  All of these may be contained in a single document, but each one should start on a new page.  

Deadline : 2 Days

Note: It’s Just Three paages work with 2 days deadline for the main question. I won’t pay more than $15. So don’t bid more that because I will not assign that work to you.