Students will submit a proposal for a capstone project case study during module 1 for approval by your instructor. The theme of your capstone should be based upon an IT risk assessment and how the various aspects of ERM play a direct or indirect role. The below format for your proposal is the exact format that you will submit your final capstone. The proposal submission should be limited to 4-5 pages and must include minimum 5 scholarly references. The page requirements listed below apply to the project and not the final capstone. It important that students follow the capstone format/subheadings for both proposal and capstone. Questions concerning APA format, scholarly references, or graduate academic writing, first review the APA Manual (7th ed.) then ask your classmates or me. It may also be useful to contact the University of Fairfax Librarian. It is expected that the student meet or exceed graduate academic writing skills for this course.
- Case Study Introduction (include business area i.e. Healthcare, e-Commerce, Banking, Government, etc.) (1/2 page)
- Overview of the Business Information Technology System selected (e.g., system description, system boundary) (1 page), that also includes:
- Identification of the assets involved (i.e. hardware, software)
- Identification of the business impacts (data, information, financial)
- Existing risks that pertain to the system or application, i.e., threats and vulnerabilities (1/2 page)
- Existing gaps in reducing risk (1/2 page)
- Impact of these risks and why remediation or mitigation is needed (1/2 page)
- Remediation or mitigation approach based on risk management or information security literature, frameworks, methodologies (1/2 pages)
- Conclusion (1/2 page)
- Reference list (5 scholarly sources; no Websites or Internet articles)
