1. The Security Plan: Effectively Teaching How to Write One Paul Clark Naval Postgraduate School pcclark@nps.edu

2. 2004-Jan-122 Introduction What is a Security Plan? Why do we need one? Educational standards CISR and NPS Secure Management of Systems: CS3670 Lessons learned from requiring a Security Plan

3. 2004-Jan-123 Educational Expectations and Roadmap Start the project early in the term. Requires some background. Different suggested formats. Roadmap for the remainder of term.

4. 2004-Jan-124 The Scenario Fiction or Non-Fiction? Minimal requirements for a written description. Debug Unintended Benefits

5. 2004-Jan-125 A Template Provides direction and uniformity. Possible formats: – Each student devises their own – The Instructor devises a standard – Industry / Government standard

6. 2004-Jan-126 Assignments Options: – Turn in a completed security plan at the end of the term. – Turn in parts of the plan throughout the term. Risk Analysis Methodology?

7. 2004-Jan-127 Questions?