The bullet points above outline the topics that are to be addressed in this assessment, and the scoring rubric informs the level of detail required at each of the competency levels covered in the rubric.
| Criteria | Non-performance | Basic | Proficient | Distinguished |
|---|---|---|---|---|
| Analyze the legal implications for officers of public companies in a regulated industry if they fail to secure information assets in their company from known threats and vulnerabilities. |
Does not analyze the legal implications for officers of public companies in a regulated industry if they fail to secure information assets in their company from known threats and vulnerabilities. | Analyzes incompletely or inaccurately the legal implications for officers of public companies in a regulated industry if they fail to secure information assets in their company from known threats and vulnerabilities. | Analyzes the legal implications for officers of public companies in a regulated industry if they fail to secure information assets in their company from known threats and vulnerabilities. | Analyze the legal implications for officers of public companies in a regulated industry if they fail to secure information assets in their company from known threats and vulnerabilities, including the use of supporting examples. |
| Differentiate between policy violations and law breaking. |
Does not differentiate between policy violations and law breaking. | Differentiates incompletely or inaccurately between policy violations and law breaking. | Differentiates between policy violations and law breaking. | Differentiates between policy violations and law breaking, including the use of supporting examples. |
| Describe the appropriate response procedure following a reported information security related policy violation. |
Does not describe the appropriate response procedure following a reported information security related policy violation. | Describes incompletely or inaccurately the appropriate response procedure following a reported information security related policy violation. | Describes the appropriate response procedure following a reported information security related policy violation. | Describes the appropriate response procedure following a reported information security related policy violation, including the use of supporting examples. |
| Describe the appropriate response procedures following a reported information security related criminal violation. |
Does not describe the appropriate response procedures following a reported information security related criminal violation. | Describes incompletely or inaccurately the appropriate response procedures following a reported information security related criminal violation. | Describes the appropriate response procedures following a reported information security related criminal violation. | Describes the appropriate response procedures following a reported information security related criminal violation, including the use of supporting examples. |
| Exhibit proficiency in writing and use of APA 6th edition. |
Does not exhibit proficiency in writing and use of APA 6th edition. | Exhibits a low level of proficiency in writing and use of APA 6th edition. | Exhibits proficiency in writing and use of APA 6th edition. | Exhibits a high level of proficiency in writing and use of APA 6th edition. |

WhatsApp us