Individual work

Background

Before delivering the final report the CISO would like to feel confident that you are on the right track and have thus asked you deliver drafts of the report along the project. This enables the CISO to guide you in the right direction for the final report (on which both your future careers depend). In general the CISO would like to see multiple iterations of the task where each iteration cover all parts of Yacraf and with a larger scope and more details added per iteration. The drafts should primarily focus on the models and analysis and not the production of the report text (even though some supporting text will likely be needed to explain the gist of the draft). The more comprehensive the draft, the more guidance you will be able to get. What you hand in as drafts can be completely changed for the final report.

Description

There are four occasions to hand in drafts. You are advised to iterate as far as you can for all drafts but as a minimum to show that you are on track the drafts should cover:

Draft 1. Analysis scope and system architecture (phase 0 and 2)
Draft 2. Two loss events and two abuse cases (phase 1, 3, and 4)
Draft 3. Two scenarios and one recommended action (phase 5)

Technically these hand-ins are mandatory. However, there are no requirements on the content and no-one will fail these assignments. So in practice the hand-ins serve the purpose to explicitly give an account of progress. To your self as well as the teachers.

Draft 4. Voluntary.
We will organize one peer-review seminar. If you want to attend this seminar you need to submit a draft report with content enough so that it will lead to meaning full in the group discussions at the peer-review seminar. The submission will be reviewed by the teachers and judged sufficient / insufficient. If your draft is sufficient you are welcome to the seminar. On the seminar participants will be organized in smaller groups and the available time will be divided to go through each group member's work. No preparations are needed but you need to bring a computer so that you can share and receive drafts with the group. Time will be dedicated for reading as well as discussing the drafts. A good approach to conducting the peer-reviewing is to comment on them with respect to the grading criteria.

A final note: the drafts and the peer review are all learning activities, not examination. So, the quality of your drafts will not impact the grade of the final report.