If you’re among the Project Management field, or if you’ve constantly wanted to immerse yourself throughout this thriving discipline, you’ve possibly questioned concerning what steps you’d prefer to need to urge certified to advance your career. The Project Management virtuoso (PMP) and PRINCE2 certification unit of measurement is very supposed among the sphere and will validate for employers your understanding of key project management concepts and, therefore, the thanks to using them throughout the project management lifecycle.

So that begs the question: that certification is correct for you? It’s not a simple decision, to be sure, however, worry not – we’ve done plentiful of the toil for you! this text offers a top-level view of PRINCE2 Vs. PMP certifications, necessary edges, and job prospects for everybody. Browse on to make the proper choice!

What is the Key distinction Between PRINCE2 Vs. PMP?

Fundamentally, the PRINCE2 and PMP Certification involve two all completely different project management frameworks. Everyone provides a body of knowledge, and a tested approach to managing comes effectively. Selecting one over the alternative may be a decision that involves several factors. The most effective choice have to be compelled to be supported by the trade or company you are going to build a career in, and conjointly the design of the project you’re reaching to lead or direct. Every certification program unit of measurement of equal value, albeit in many aspects of project management.

The Project Management virtuoso (PMP) Certification

One of the foremost very regarded certifications among the planet for project managers, the PMP or Project Management virtuoso Certification, maybe a qualification program that is offered by the Project Management Institute (PMI). Varied industries use PMP as a customary demand for project managers. Turning into a PMP empowers you to work with any methodology and in any trade. The certification course covers an oversized spectrum of project management techniques and competencies that unit of measurement necessary for any project manager and will facilitate increase your earning potential. This course, administered by PMI among the USA, has together gained quality in Europe and Asia.

The PMP Qualification

It is indicative of your proficiency in practice the PMBOK Guide, the Project Management Book of knowledge.

Verifies your info concerning “generally-accepted” best practices and principles of project management.

The comes in Controlled Environments (PRINCE2) Certification.

The PRINCE2, or ‘Projects IN Controlled Environments’ certification, maybe a process-based project management technique that provides a scientific approach to delivering a prosperous project with clear templates, processes, and steps. The certification is methodology and project-focused. PRINCE2 is run among the dominion by the APMG.

The PRINCE2 Qualification

It is a broad, high-level, general framework of project management principles that suggest it’s urged for and will be implemented with relation to any project.

Has a well-laid out and standardized approach to project management.

Spells out the roles and responsibilities of each member of the team tasked with managing the project.

Divides the master project started into project plans, stage plans, and team plans, which eliminates ambiguity and makes it easier to execute the project.

It is every project and methodology targeted.

Industry Demand

If you’d prefer to urge one in every one of these certifications, it’s a necessity that you simply do your analysis before you begin to steer down one path vs. the other. Each certification is in higher demand in specific geographies, so you’d prefer to see that of the two certifications, which will boost your employability. Also, one or two of trade sectors like PRINCE2 certification, whereas others just like the PMP certification.

The PMP certification is most well-liked among the USA, Canada, geographical region, and Australia. PRINCE2, however, is recognized among the dominion, Europe, and Australia.

Region-Wise Preferences of the Project Management Certification

PRINCE2 Vs. PMP: pay Prospects

Several studies and surveys show that certified professionals in project management earn way more than their non-certified peers. Having a project management certification, significantly ones like PRINCE2 and PMP, signifies that a person is responsive to and understands the universal language of project management.

The PMI Project Management pay Survey – Tenth Edition states that the salaries of project managers around the world still climb.

In the U.S. alone, the everyday annual pay of a licensed PMP is $112,000 p.a. They earn a median of two-hundredths quite their non-certified peers. The most effective average get PMPs is within the European nations at $130,966.

Creation of Summative Assessment

[WLOs: 1, 3] [CLOs: 1, 2, 4]

Once a unit of instruction has been taught, an educator may use a summative assessment to determine if learners have mastered the standards and learning objectives. Remember, the formative assessments determine how learning is occurring during instruction so that educators can make any necessary changes to support learning, whereas the summative assessment determines actual achievement of the standards and objectives reflected in a grade. For this assignment, you will be creating your own summative assessment based on the standard you selected and objectives you created.

Prepare

Prior to beginning work on this assignment,

• Read Chapter 6: Summative Assessment
• Read Chapter 7: Performance-Based Assessment
• Read Chapter 8: Teacher-Made Assessments
• Review Creating and Using Rubrics  (Links to an external site.)and complete the interactive tool at the end of Chapter 7.6 that will walk you through the process of developing a rubric for a performance based assessment.
• Download the Week 3 Test Blueprint template to use for your assignment.
• Review the Week 3 Weekly Lesson
• Research a scholarly article in the Ashford University Library regarding the benefits and challenges of performance-based assessments.
• Choose one of the links to help you create a rubric:
  • Quick Rubric (Links to an external site.)
  • Rubistar (Links to an external site.)
  • Teachnology General Rubric Generator (Links to an external site.)

Reflect

Begin thinking about the different ways that teachers assessed your knowledge. What were typical assessments that you experienced? Did they use multiple-choice tests, essays, projects, or presentations?

Content Instructions

Part 1

Complete the following using the Week 3 Test Blueprint template:

• Create a test blueprint comprised of 10 test items that include the following criteria:
  • Six test items must be selected-responses (Must have at least one multiple-choice, one matching, and one true or false question. You can pick any other type of selected-response questions for your other 3 questions.)
    • Use the checklists found in Tables 8.6, 8.7, and 8.8 of your text (Chapter 8) to make sure your selected-responses meet the guidelines.
  • Three test items must be short-answer constructed responses (see Chapter 8.8)
  • One test item must be a performance-based assessment (see Chapter 7)
    • Examples: Presentation, Performances, Projects, Debates, Reports
• Create your test items reflected in your testing blueprint. Be sure to label each question with the aligned objective and level of Bloom’s Taxonomy. Questions must address at least three different levels of Bloom’s Taxonomy which are reflected in your learning objectives.
• Create an analytic rubric to assess the performance based assessment developed in the test blueprint. (see Chapter 7.6 and Creating and Using Rubrics (Links to an external site.)). It must include the following:
  • At least four levels of performance for rating scale (example: Novice, Apprentice, Practitioner, Expert or Exemplary, Proficient, Developing, Inadequate)
  • At least four different criteria that are aligned to the learning objectives and assignment (For example, your performance-based assessment might require criteria such as critical thinking, using research to support analysis, and grammar and mechanics)
  • Clear performance level descriptions for each criterion based on the rating scale.

Part 2

After you have completed your test blueprint and test questions, on a new page using the heading Reflection (center it), discuss the following questions:

• Describe the advantages and limitations of using selected-response and constructed-response assessments.
  • Use evidence from your readings to support your analysis.
• Discuss the main requirements of a good performance-based assessment and relate those requirements to the one you created. (see Chapter 7.4).
  • What are the benefits and challenges with using performance-based assessments? Consider the challenge of using rubrics to assess student work. Use evidence from your readings and at least one outside scholarly source.
• Conclude with sharing your experience in creating this summative assessment.
  • What did you find most challenging? What was helpful for you in creating this summative assessment? Be sure to elaborate on your thoughts.

Writing and Formatting Expectations

Your Creation of Summative Assessment assignment

• Must be eight to 10 double-spaced pages including the test blueprint, test questions, and reflection (does not include the title or reference page).
• Must include a separate title page with the following:
  • Title of paper
  • Student’s name
  • Course name and number
  • Instructor’s name
  • Date submitted

For further assistance with the formatting and the title page, refer to APA Formatting for Word 2013 (Links to an external site.).

• Must include an introduction and conclusion paragraph. Your introduction paragraph needs to end with a clear thesis statement that indicates the purpose of your paper. For assistance on writing Introductions & Conclusions (Links to an external site.) as well as Writing a Thesis Statement (Links to an external site.), refer to the Ashford Writing Center resources
• Must use proper syntax and mechanics. Your writing should display meticulous comprehension and organization of syntax and mechanics, such as spelling and grammar.
• Must include at least one scholarly source found in the Ashford University Library in addition to the course text (Lefrançois). Exemplary assignments will include at least one more source in addition to the required scholarly source and the course text. Refer to Integrating Research (Links to an external site.) for assistance
  • The Scholarly, Peer Reviewed, and Other Credible Sources (Links to an external site.) table offers additional guidance on appropriate source types. If you have questions about whether a specific source is appropriate for this assignment, please contact your instructor. Your instructor has the final say about the appropriateness of a specific source for a particular assignment.
• Must document any information used from sources in APA style as outlined in the Ashford Writing Center’s Citing Within Your Paper (Links to an external site.) guide.
• Must include a separate references page that is formatted according to APA style as outlined in the Ashford Writing Center. See the Formatting Your References List (Links to an external site.) resource in the Ashford Writing Center for specifications.
• Must use APA formatting consistently throughout the assignment. Refer to the Ashford Writing Center (Links to an external site.) for assistance with APA style and formatting.

Project 2: Authentication, Authorization, and Access Control
Start Here

Authentication, Authorization and Access Control

[Music]

On your computer monitor, you read the meeting topic: “HR Data Access.” You think, “This might be a tricky one.”

You remember a discussion with John, the CTO, about conflict caused by the sharing of information between two departments. Grabbing your laptop, you head to the meeting.

In the conference room, John is already waiting. He says, “We will be joined by the VP of HR and the managers of the Payroll and Training departments. Our focus will be on access to data that is housed in the HR database.”

The door opens and the other three attendees walk in.

Amy Jones, the vice president of HR, begins: “The database that we use contains all employee data, ranging from payroll and benefits information to training and performance results. The issue that we are facing, and that I hope you can help us alleviate, is that all departments within Human Resources have full access to all of the data within the database.

“Recently, it was brought to my attention that the training department has access to payroll data.”

The two managers glance at one another.

John says, “I believe we can come up with a solution. As a matter of fact, this could be an opportunity to also evaluate the risk level that the HR database has from outside threats.”

John turns to you: “I would like you to prepare a presentation for HR management.

“In this presentation, you will suggest how we might limit access to specific types of data and protect vulnerable data from outside threats. Since we will be presenting to non-technical managers, you will need to explain the difference between authentication, authorization, and access control in plain language. The presentation will be scheduled in three weeks.”

After the meeting, you realize that while you might understand the problems of data access, other employees may not be aware of the issues involving information access in an organization. Your presentation will have to be understood by employees who do not have an information technology background.

Organizations have two concerns surrounding access to data: They must limit access to data from outside the organization as well as control which people have access to what data within the organization. In this project, you will explain to management the difference between authentication, authorization, and access control, and suggest how to keep outsiders from getting in and keep insiders from getting data they shouldn’t.

This is the second of four sequential projects. During this project, you will research the models for authentication, authorization, and access control. You will also communicate the recommended solution to a nontechnical audience.

There are 13 steps in this project. Begin by reviewing the project scenario and then proceed to Step 1.

Competencies

Your work will be evaluated using the competencies listed below.

• 5.3: Support policy decisions with the application      of specific cybersecurity technologies and standards.
• 6.2: Create an information security program and      strategy, and maintain alignment of the two.
• 6.3: Integrate the human aspect of cybersecurity      into an organization’s cybersecurity policy.
• 9.3: Risk Assessment: Assess policies, processes,      and technologies that are used to create a balanced approach to      identifying and assessing risks and to manage mitigation strategies that      achieve the security needed.

Step 1: Explore the Basics of Authentication

In order to build a presentation with the most current information available, you will gather information by reaching out to a group of your peers working in various industries. In the next three steps, you will prepare background information for this discussion.

• You’ll      need to have a basic understanding of authentication. Define      authentication and identify the core principles and key tenets of authentication as listed below. Review the      following topics: computer networks, network devices and cables, and network protocols.
• Identify      the ways in which someone can be authenticated (e.g., userIDs, passwords).
• Describe      how authentication has evolved over time and identify stressors that have      resulted in changes to authentication.
• Identify      the different types of authentication (e.g., layered or two-factor),      compare and contrast their attributes, and give examples of each.
• Compare      and contrast single-factor and multifactor authentication.

In the next step, you will continue with your exploration of data access models with a look at authorization.

Step 2: Explore the Basics of Authorization

Another topic you’ll need to be prepared to discuss is authorization. Define authorization and differentiate it from authentication (similarities and differences). You will use the notes compiled in this step in your upcoming peer discussion. Complete each of the items listed below.

• Define authorization      and identify examples of authorization schemes.
• Determine      how access policies are used to express authorization rule sets. Identify      key principles of access policies.
• Identify      the challenges that can arise when policies are used to maintain authorization      rules. Identify solutions to mitigate these challenges.

In the next step, you’ll complete your exploration of data access models with a look at access control.

Step 3: Explore the Basics of Access Control

One last topic to prepare for the upcoming discussion is access control: Define access control and then differentiate between access control, authentication, and authorization. You will use the notes compiled in this step in your upcoming peer discussion. You should describe the different access control models and how they are used, including, but not limited to, the list below.

Again, review the following topics if needed: systems, utilities, and application software, interaction of software, and creating a program.

• RBAC: role-based      access control
• MAC: mandatory      access control
• ABAC:      attribute-based access control
• IBAC: identity-based      access control

After completing this step, you are ready for the next step, in which you will compile a report on the psychological aspects of cybersecurity.

Step 4: Write a Social Psychology Report

In the previous steps, you explored the basics of authentication, authorization, and access control and common models of implementing them. Your next task in preparing for the discussion with your peers is to consider the impact that human factors, such as ethics, legal issues, and psychology have on cybersecurity.

To synthesize your research on these factors, you will write a report on the psychological aspects of cybersecurity. This report will be used to formulate recommendations later in the project and be included as an appendix to the final presentation in the last step of this project.

In this report, do the following:

• Explore      the typical intrusion motives/hacker psychology. Classify the types      of hackers and threat actors and give an example of a      potential incident.
• Define a      cybersecurity policy as it relates to employees and employment. For      example, how would an organization apply a security policy to employees      and employment in relation to network-related programming or other      cyber-related positions?
• Define      the separation of duties policy and give an example.
• Define redundancy and diversity and explain how they relate      to cybersecurity access control. Give an example of a policy integrating      the concepts of redundancy and diversity to reduce risk.
• Summarize      how the implementation of the access control mechanisms mentioned in this      section may have a positive or negative consequence on employee      productivity.
• Suggested      length is four to six pages.

Submit the report for feedback.

Step 5: Compose a Privacy Awareness Report

Following the report on the impact of social psychology on cybersecurity, you will compose a report on privacy awareness and the implications on cybersecurity policy to further prepare for the discussion with your peers. This report will be used to formulate recommendations later in the project and be included as an appendix to the final presentation in the last step of this project.

In this report, complete the following:

• Define ECPA (Electronic Communications Privacy Act)      and explain how it affects cybersecurity today. Give an example of how it      might come into play at your organization. Suggest how policy at your      organization could support ECPA compliance.
• Define FISA (Foreign Intelligence Surveillance Act)      and explain how it affects cybersecurity today. Give an example of how it      might come into play at your organization. Suggest how policy at your      organization could support FISA compliance.
• Identify any other privacy law that may affect your      assigned organization. Give a brief summary of what the law does, how it      affects your organization, and how policy could support compliance.

Submit the report for feedback.

Submission for Privacy Awareness Report

Step 6: Compile an Anonymity Report

To go along with the reports on the impact of social psychology on cybersecurity and the impact of privacy awareness on cybersecurity policy, you will now report on the implication anonymity has on cybersecurity by giving a brief one-paragraph summary on each of the items within the bulleted list below.

• Each summary should include a definition, and      explanation of how the term relates to the organization, and an      explanation of how you will integrate it into the policy recommendations.      This report will be used to formulate recommendations in Step 10 and be      included as an appendix to the final presentation in Step 12. Review introduction to the internet, a closer look at the World Wide Web, web markup languages, and web and internet services for basic information.
• pseudonymity
• IP spoofing (IP spoofing and packet sniffing at the      network layer)
• email protocols
• web filters
• types of encryption
• remailers

Submit this report for feedback.

Submission for Anonymity Report

Step 7: Create a Concept Map

You have explored and reported on the human aspects of cybersecurity. Chief information security officers frequently make security decisions in high-pressure environments and deal with individuals whose actions may violate certain standards of behavior and ethics. In this step, you will review several scholarly sources that discuss issues and concerns that a CIO and CIO staff may be faced with in the normal course of duties.

After you have reviewed these materials, create a concept map of important issues, concerns, and best practices or model solutions to common problems. Your goal in creating this map is to develop a visual aid which can help decision makers identify important aspects of a cybersecurity issue revolving around human behavior as they seek to resolve the issues in a manner that is in keeping with an organization’s ethical standards and practices.

Review the following scholarly sources:

1. Dunn Cavelty, M. (2014). Breaking the cyber-security dilemma: Aligning security needs and removing vulnerabilities. Science & Engineering Ethics, 20(3), 701–715. http://ezproxy.umgc.edu/login?url=https://search.ebscohost.com/login.aspx?direct=true&db=asn&AN=97178206&site=eds-live&scope=site

2. Evans, M., Maglaras, L. A., He, Y., &Janicke, H. (2016). Human behaviour as an aspect of cyber security assurance. https://arxiv.org/ftp/arxiv/papers/1601/1601.03921.pdf

3. Draper, C. & Raymond, A. H. (2020). Building a risk model for data incidents: A guide to assist business in making ethical data decisions. Business Horizons (2020) 63, 9-16. https://doi-org.ezproxy.umgc.edu/10.1016/j.bushor.2019.04.005

Build Your Concept Map

You can use MS Word or PowerPoint to create your map using boxes, ovals, and connecting lines. Below are simple concept maps made using MS Word’s Smart Art. Your concept map should have between 15 to 20 concepts total.

Example One:

Example Two:

Note: if you are not familiar with how to build a concept map and would like more information, see the following https://www.lucidchart.com/blog/how-to-make-a-concept-map

Step 8: Assess Authentication, Authorization, and Access Control

Now that you have explored authentication, authorization, and access control, you will direct attention to the specific issues of your assigned organization.

Identify particular issues that the organization has had, currently has, or could potentially have in terms of authentication, authorization, and access control. Next, assess the potential effectiveness of the access control models from Step 3 for the organization and scenario.

Document your assessment, as you will refer to this information throughout this project.

Career Connections

In many twenty-first century professions, expertise in your own field is not always enough. Sure, you are well on your way to becoming an expert in cybersecurity management. But the cybersecurity field exists so that professionals in other field can be confident that their computing platforms are safe. Knowledge of the types of information, processes, teams, and real-life activities that other professionals engage in is what will enable you to make the best decisions about how to ensure CIA on widely disparate platforms in different environments.

In the next step, you will look across your industry to determine best security practices.

Step 9: Research Industry Best Practices

In the first three steps, you gathered information regarding authentication, authorization, and access control and had an opportunity to apply these concepts through training. You have thought about how to apply this knowledge to your organization, and you wrote reports on how psychology, anonymity, and privacy awareness affect cybersecurity. You are finally ready to meet with your peers in the industry to get a sense of current practices.

The peer discussion can take various shapes. Research online articles and/or interview colleagues, friends, and acquaintances in different fields to gather the most current information of what various industries are doing to face their cybersecurity needs. The information and ideas that you obtain here will help you to formulate a recommendation and develop a job aid for the human resources (HR) managers that John requested. You will need to at least cover the items in the list below.

• Give      examples of authentication, authorization, and access control that you      have seen in your experience, in your assigned organization, and/or in      research and interviews.
• Discuss      what worked well and what could be improved.
• Discuss      the role of policy in defining and implementing authorization schemes as      applied to your experience.
• Apply key      points and principles in the NIST cybersecurity framework for virtual machine cybersecurity.
• Analyze      the technologies, uses, and roles of information assurance and software      protection technologies.
• Prioritize      current cybertechnological threats faced at the enterprise, national, and      international levels.
• Evaluate      the procedures, policies, and guidelines used to protect the confidentiality, integrity, and availability of      information (CIA triad).

Use the information gathered here to assist in formulating your recommendations in the next step.

Step 10: Formulate Recommendations

From the information that you have gathered throughout this project, formulate a recommendation for authentication, authorization, and access control. If you determine that your organization needs no changes in these areas, explain your position and what leadership (and you, as CISO) will continue to monitor to ensure that security standards are commensurate with expectations.

Make sure to consider the needs of restricting data from department to department as appropriate, protecting the organization’s HR data from outside and inside threats in general and allowing for employees to access the data they need while offsite. Also consider the human aspects of cybersecurity from the previous steps. Include a recommendation for an ongoing risk management strategy. You will include your recommendations in your Implementation Guidance Presentation in the last step.

The recommendation must meet the following criteria:

• coincide      with IT vision, mission, and goals
• align with      business strategy
• incorporate      all internal and external business functions
• create the      organizational structure to operate the recommendation and align with the      entities as a whole

In the next step, you will take your recommendations and use them to create a job aid for HR managers regarding authentication, authorization, and access control so they can spread the information to the various departments.

Step 11: Develop a Job Aid

Now that you have formulated your recommendation for authentication, authorization, and access control, you will develop a job aid that the HR managers can take to their departments after the presentation.

This job aid will empower the HR managers to educate their staff on the topics of authentication, authorization, and access control in a simple and effective way to improve the security of their systems. The job aid will be distributed after the presentation.

Develop a short (two- to three-page) job aid that explains the differences between authentication, authorization, and access control using common-sense examples to help the reader understand the differences and the importance of each in protecting the organization’s information. The job aid should address all the items listed below.

• Define—in layman’s terms—authorization,      authentication, and access control, and the relationships between them.
• Identify and articulate examples that are easy to      comprehend and that would resonate with the company’s leadership.
• Describe the importance of authorization,      authentication, and access control to the overall security of the      organization. Use details of the company’s products/services and the need      to protect them to emphasize the need for strong controls.

Submit the job aid for feedback.

Submission for Authentication, Authorization & Access Control Job Aid

Project 2: Authentication, Authorization, and Access Control
Step 12: Develop the Implementation Guidance Presentation

In response to the request from the CTO and VP of HR, you will develop a presentation for HR management which discusses how to limit access to specific types of data and protect vulnerable data from outside threats. You will explain the lineage of data, data ownership, and data-access related authentication, authorization, and access control. You will also take this opportunity to educate on the basic principles of data/network access control and to advocate for stronger access controls.

You will develop an 18- to 20-slide presentation that clearly explains the principles of authentication, authorization, and access control, examines various models, and recommends a strategy for the organization. You will use the information that you have gathered in the initial steps of this project. Make sure to include the following:

• Describe      authentication, authorization, and access control as an important security      concept.
• Evaluate      the different models and examples of authentication, authorization, and      access control.
• Make the      case for changes to the organization’s authentication, authorization, and      access control policies/systems.
• Present      the recommended strategy.
• Discuss      how you will evaluate the effectiveness of the security program.

Submit the presentation in the last step.

Step 13: Check Your Evaluation Criteria

Your presentation should include the following as appendices:

• Social Psychology Report (Step 4)
• Privacy Awareness Report (Step 5)
• Anonymity Report (Step 6)
• Job Aid (Step 11)

Check Your Evaluation Criteria

Before you submit your assignment, review the competencies below, which your instructor will use to evaluate your work. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. To view the complete grading rubric, click My Tools, select Assignments from the drop-down menu, and then click the project title.

• 5.3: Support policy decisions with the application      of specific cybersecurity technologies and standards.
• 6.2: Create an information security program and      strategy, and maintain alignment of the two.
• 6.3: Integrate the human aspect of cybersecurity      into an organization’s cybersecurity policy.
• 9.3: Risk Assessment: Assess policies, processes,      and technologies that are used to create a balanced approach to      identifying and assessing risks and to manage mitigation strategies that      achieve the security needed.

Submission for Implementation Guidance Presentation