This is a Group Project. Part 1 and Part 2 will be completed during the resid

This is a Group Project. Part 1 and Part 2 will be completed during the residency are are worth 1/3 of your grade.-You are a security professional for Tech R Us, an IT (Information Technology) services provider with approximately 400 employees. Tech R Us partners with industry leaders to provide storage, networking, virtualization, and cybersecurity to clients. -Tech R Us recently won a large DoD (U. S. Department of Defense) contract, which will add 30 percent profit to the revenue of the organization. It is a high-priority, high-visibility project. Tech R Us will be allowed to make its own budget, project timeline, and tollgate decisions. (Note: a tollgate decision refers to the gates methodology, which is a process of project progressive definition based on a planned and standardized evaluation at the end of each phase. a gate or tollgate is a standardized control point where the projects phase is reviewed ad/or audited and approved (or not) to continue with the next phase)-As security professionals for Tech R US, you are responsible for developing security policies for this project. These policies are required to meet DoD standards for delivery of IT technology services to the U. S. Air Force Cyber Security Center (AFCSC), a DoD agency.-To do this, you must develop DoD-approved policies, standards, and control descriptions for your IT infrastructure. The policies you create must pass DoD-based requirements. Currently, your organization does not have any DoD contracts and thus has no DoD-compliant security policies, standards, or controls in place.-For Research Project Part 1, each group will research U.S. compliance laws that may affect the firm. -Part 1A Assignment Details: For 135 points your team must:-(1) Develop a list of compliance laws required for DoD contracts.-(2) Your report should include a justification or discussion as to what made the group determine these compliance laws are necessary for Tech R Us to fulfill the DoD contract.-(3) What happens with the awarded contract if Tech R US does not comply to these laws?-This assignment should be two to three pages (500 to 750 words double spaced) and is due during the first half of day 1.-Part 1B:-1. develop a list of list of DoD-compliant policies, standards, and controls that affect the WAN, Remote Access, and System/Application Domains.-and-2. provide a justification or discussion as to why your team selected these policies, standards and controls.-This assignment should be two to three pages and is due during the second half of day 1.-Instructions:-Submission includes:-

Format: Microsoft Word
Font: Times New Roman, size 12 point, double spaced
Citation style: APA format using a hanging indentation of 1/2 inch
Length of draft research documents: 2 – 3 pages
Two references cited in APA Style
All team members names should appear on the title page for this assignment.
-This is a group project. Each group is identified in Blackboard. Select a team leader, note taker, and reviewers. 

M4 R2 – Residency Group Project Part 2 – Due Day 2 of the ResidencyThe research project is a research-based paper on a current topic in the area of Cyberlaw.  Parts 1 and 2 will be completed during the residency.In this deliverable you will have to provide the following:Part 2  – The Presentations(4) During day 2, your group will present your findings in a PowerPoint Presentation. Your presentation should be at least 5 slides. Your presentation should be NO LONGER than 5 minutes. Time will be kept and you will be notified when your time is up, so it is important to remain within the time allotted.Instructions:Submission includes:

Part 2 B – PowerPoint Presentation 5 to 10 slides
Two references cited in APA Style
include in-text citations for all of your references
All team members names should appear on the title page for this assignment.
This is a group project. Each group is identified in Blackboard. Select a team leader, note taker, and reviewers. 

Project InstructionsPurpose
This course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies.Learning Objectives and Outcomes
Successful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this project, you will be able to do the following:

Evaluate compliance laws relevant to the U.S. Department of Defense.
Assess policy frameworks appropriate for an organization in a given scenario.
Evaluate security controls and standards for the seven domains of a typical IT infrastructure.
Develop DoD-compliant policies for an organization’s IT infrastructure.
Required Source Information and Tools
Web References: Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on January 4, 2022. The following tools and resources will be needed to complete this project:
Course textbook
Internet access
DoD instructions or directives
https://www.esd.whs.mil/dd/
Risk Management Framework (RMF) for DoD Information Technology (IT) https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/851001p.pdf?ver=2019-02-26-101520-300
U.S. Department of Defense (DoD) Chief Information Office Library
https://dodcio.defense.gov/Library/
Department of Defense Information Security Program
https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/520001m_vol1.pdf?ver=2020-08-04-092500-203
Department of Defense Internet Services and Internet-Based Capabilities
https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/817001p.pdf
You may consult other relevant sources, if needed. If so, include citations for those sources in the final deliverable for this report.Deliverables
This project is divided into several parts, each with a deliverable. The first three parts are research drafts, which should include organized lists and notes gathered during research, sources, and in some cases policy drafts. These documents should be organized and readable, but are not polished reports. ItemDeliverablesProject Part 1U.S. Compliance Laws ResearchDevelop a list of compliance laws required to DoD contracts. Your resport should include a justification or disussion as to what made the group determine these compliance laws are necessary for Tech R Us to fulfill  the DoD contract. What happens with the aswarded contract if Tech R Us does not comply wo these laws?Project Part 2Infrastructure Research ASubmit a draft of (1) which policy framework(s) will be followed for the project and (2) develop a list of DoD-compliant policies, standards, and controls that affect the User, Workstation, LAN, and LAN-to-WAN Domains and (3) provide a justification or discussion as to why your team selected these framework(s) policies, standards, and controls.Project Part 3Infrastructure Research BDevelop a list of list of DoD-compliant policies, standards, and controls that affect the WAN, Remote Access, and System/Application Domains and (2) develop a justificcation or discussion as to why your team selected these policies, standards, and controls.Project Part 4Final ReportSubmit the final report of your class project. This is a group project. Each group is identified in Blackboard. Select a team leader, note taker, and reviewers. Identify when you will hold weekly team meetings as a group to be sure the work is proceeding on schedule.Scenario
You are a security professional for Tech R Us, an IT services provider with approximately 400 employees. Tech R Us partners with industry leaders to provide storage, networking, virtualization, and cybersecurity to clients.Tech R Us recently won a large DoD contract, which will add 30 percent to the revenue of the organization. It is a high-priority, high-visibility project. Tech R Us will be allowed to make its own budget, project timeline, and tollgate decisions.As a security professional for Tech R Us, you are responsible for developing security policies for this project. These policies are required to meet DoD standards for delivery of IT technology services to the U.S. Air Force Cyber Security Center (AFCSC), a DoD agency.To do this, you must develop DoD-approved policies, standards, and control descriptions for your IT infrastructure (see the “Tasks” section in this document). The policies you create must pass DoD-based requirements. Currently, your organization does not have any DoD contracts and thus has no DoD-compliant security policies, standards, or controls in place.Tech R Us’ computing environment includes the following:
12 servers running the latest edition of Microsoft Server, providing the following:

Active Directory (AD)
Domain Name System (DNS)
Dynamic Host Configuration Protocol (DHCP)
Enterprise resource planning (ERP) application (Oracle)
A research and development (R&D) engineering network segment for testing, separate from the production environment
Microsoft Exchange Server for email
Email filter
Cloud-based secure web gateway (web security, data loss protection, next-generation firewall, cloud application security, advanced threat protection)

Two Linux servers running Apache Server to host your website
400 PCs/laptops running Microsoft Windows 10, Microsoft 365 office applications, and other productivity tools
Tasks
Develop a list of compliance laws required for DoD contracts.
Determine which policy framework(s) will be used for this project.
List controls placed on domains in the IT infrastructure.
List required standards for common devices, categorized by IT domain.
Develop DoD-compliant policies for the organization’s IT infrastructure.
Describe the policies, standards, and controls that would make the organization DoD compliant.
Develop a high-level deployment plan for implementation of these polices, standards, and controls.
Write a professional report that includes all of the above content-related items and citations for all sources.
Submission Requirements
Format: Microsoft Word
Font: Times New Roman, size 12, double-space
Citation style: APA format using a hanging indentation of ½”
Length of draft research documents: 2–3 pages
Length of final report: 8 – 12 pages (4,000 – 6,000 words)
Group-Assessment Checklist for Final Report
We developed a list of compliance laws required for DoD contracts.
We listed controls placed on domains in typical IT infrastructure.
We listed required standards for common devices, categorized by IT domain.
We developed DoD-compliant policies and standards for my organization’s IT infrastructure
We described the policies, standards, and controls that would make my organization DoD compliant.
We listed all applicable DoD frameworks in the final report.
We developed a high-level deployment plan for implementation of these polices, standards, and controls.
We created a professional, well-developed report with proper documentation, grammar, spelling, and punctuation.
We included citations for all sources used in the report.
We followed the submission guidelines.