Project- Information Security Standards CSIA

Learning Objectives

After completing this project, students will be able to:

1. Identify recognized US Standards Organizations
2. Describe at least two technical standards
3. Compare and contrast technical standards for information systems security technologies.
4. Describe how the technical standards impact the selected organizations' information security programs

Deliverable

Your research paper should be at least three, full pages, double spaced, 1-inch margins, in New Times Roman 12-pitch font, with a cover page (name, course number, date, title of paper) and a reference page. The cover page and reference page are not included in the three-page minimum. Papers not meeting the three full-page minimum will lose points. You must have at least three scholarly sources, correctly formatted per APA guidelines. Submit your research paper to the appropriate TurnItIn assignment area by the due date.

Detailed Description of Learning Activity

1. Review your organization's information security program documentation and determine what standard(s) the organization used to create the program.

2. Pick one of the following three standard options for your comparison:

- FIPS 200 and ISO 27002
- FIPS 140-2 and ISO 19790
- DES/3DES/AES (if you select this option you must compare all three standards against each other)

3. Select three to five points of analysis (POAs) from the FIPS 200, FIPS 140-2, or AES standard.

4. Find the equivalent POA in the ISO 27002, ISO 19790, or 3DES/DES standard respectively.

5. Write your research paper. At a minimum, the paper should include

- an Introduction that includes the purpose of your paper, introduces the organization, and explains why you selected the standards you are researching
- a Standards section that describes from a general standpoint, the two standards you selected for the paper
- a Points of Analysis section that describes your three to five points, from a general standpoint
- a Compare and Contrast section explaining the diffrences between the two standards, using details and specifics
- Use spell and grammar check before submitting. It is also a good idea to have someone else read your paper.
- Submit the project to TurnItIn by the due date.

6. Examples of POAs:

- Cryptographic Key Management (FIPS 140-2)
- Security Levels of Cryptographic Modules (140-2)
- Key Length (AES)
- Performance (AES)
- System Impact Levels (FIPS 200)
- Security Control Selection (FIPS 200).