Assessment 1: Research Report
Overview
Weight Length Due date ULO
Introduction
In this individual assessment, you will select a country and explain the legislated cyber security regulation, laws and ethics. You should provide your opinion on your findings. You are required to reference original laws (e.g. commlaw) or court cases and to provide all references (PDFs, links, etc).
Research and discuss cyber issues concern. Identify and compare your chosen country and applicable laws in each region (Australian-Pacific, Europe, America, and Asia). Recommend what type of policy/procedures an organisation should have in place on the issue (do not write the policy/procedure) Recommend any other initiatives (for example, Counter Ransomware Initiative) that might be applicable.
Your final report must include the following:
Assignment Cover Page: (Use the cover sheet provided. Include the Title,
Assignment number, Student Names and IDs, Subject)
Executive summary
Body (Numerous headings and text at the write choice)
References/ Bibliography
Topics:
No two students can do the same topic. You are not limited to topics below.
Students Topic
– Who will it hurt and who will it protect? (In reality, not just who it is
intended for)
Student Name: Student Number:
Bitcoins
– Research bitcoins. How it works and how it is used. (e.g. Bitcoin mining) – Explain its advantages and disadvantages in detail (e.g. can it be tracked?)
– Fraud
Freedom of Speech verses Protection of Children
– Explain various Government (US, Europe, Asia, Australia-Pacific) approaches
– Explain which laws were created as a consequence of this issue. – Did they work?
Freedom of Speech versus the China Great Firewall
– Explain what the Government is trying to mitigate – Explain the technical implementation – how to overcome it. – Does this breach Freedom of Speech in Western Countries
Sexting
– Explain what it is?
– Technical possibilities to restrict
– Is it a breach of Privacy?
Online Consumer Profiling versus Privacy Laws
– Explain what it is?
– Technical implementation
– Why are people concern?
Online Self Regulatory Privacy
– Explain what it is?
– Technical implementation (e.g. Privacy seals, Membership, etc) – Does it work? What is the alternative?
Do Not Track List versus the Privacy Laws
– Explain what it is?
– Technical implementation (e.g. Google Chrome Incognito mode vs Firefox vs Windows 10 Approach)
– Would it work? What is the alternative?
Australian tax online services proposal
– Explain what it is?
– What are other countries doing?
– Technical implementation (e.g. Google Chrome Incognito mode vs Firefox vs Windows 10 Approach)
– Would it work? What is the alternative?
– Cloud Services implication?
Plagiarism and Copyright
– What is it?
– Does Plagiarism infringe copyright?
– Have there been law cases? Verdict?
– Can a student be charge?
29
Student Name: Student Number:
Student Name: Student Number:
Student Name: Student Number:
Student Name: Student Number:
Reverse engineering
– What is it?
– Do the current Australian laws provide adequate protection? – Landmark cases?
– What are other countries doing?
Small Business Fraud
– Explain the main types (False invoicing, EFT to personal accounts, Cheque/Payroll Fraud, Skimming)
– Do the current Australian laws provide adequate protection? – Why does it happen?
– What are other countries doing?
– Long term impact?
– Who is the victim?
Legal Issue with Open-Source Code
– Explain legal issues with Open-Source Code
– Conformity, detection, prevention
– Legal action
– Types
– What are governments doing?
– Which laws applies
Cyberbullying and Cyberstalking
– What is it?
– Cases
– Prevention?
– Prosecution?
Student Number: – Cases
– Prevention?
– Prosecution?
– What are Governments doing?
– Which laws apply?
Student Name: Student Number:
Student Name: Student Number:
Computer Easter Eggs
– What is it?
– Legal Implication?
– What can companies do?
– What are Governments doing?
Computer Matching (for fraudulent activities) – What is it?
– Legal Implication?
– Does it impede the Privacy laws?
– What are other Governments/Countries doing?
Marking Guide: 20 Marks
Task Description
Executive Summary and conclusion Summarize the entire documents with key findings. Research and discuss the cyber
issues concern. Introduce the report – how come this report was created?
Identify and compare your chosen country and applicable laws in each region (Australian-Pacific, Europe, America, and Asia).
Recommend what type of
policy/procedures an organisation should have in place on this issue.
Recommend any other initiatives (for example, Counter
Ransomware Initiative) that might be applicable.
Marking criteria/Rubric
Describe with appropriate laws and critically compare each region’s legal requirement
Identify what measures an organisation should have including the development of po
Conclude your report with key laws and recommendations. Include screenshots of activities such as laws, comparisons of regions, etc.
You will be assessed on the following marking criteria/Rubric:
Assessment criteria Exceptional >=80% Admirable 70% – 79%
Creditable 60% – 69%
Acceptable 50
The logic is clear and a
C1. Executive
summary includes key points
Summary and
of the whole report. Mostly
The summary is mostly consistent with some key
Adequately
summary with limited key points
A brief relevant sum a limited conclusion reference to the evi
conclusion
accurate and appropriately
2 points
deduced conclusions from
the evidence. (2)
C2. Research and
Comprehensively research
discuss the cyber and justify the concern. (4)
issues concern.
4 points C3. Identify and
points. Mostly
accurate and
appropriately
deduced conclusions from the
evidence. (1.5)
Well-explained
research and justified the concern. (3)
Correct
conclusion with some reference to the evidence (1.25)
Adequate
research and justify the
concern. (2.5)
Limited research an the concern. (2)
Comprehensively identify
compare your chosen
Very good
Adequately
Limited explanation given on
and compare all applicable
explanation of the
country to applicable
explain
comparison few laws are identify
laws in each global region.
(4)
laws in each region (Australian-Pacific, Europe, America, and Asia).
4 points
applicable laws and comparisons in each global region. (3)
applicable laws and
comparisons in each global
region. (2.5)
discussed (2)
Limited recommend and policy/procedure not be present (2)
Recommend any other
initiatives (for example,
Comprehensively explain initiatives and develop your
Well-explained relevant initiatives. (3)
Adequately explain initiative (2.5)
Limited explanation clear initiatives. (2)
Counter Ransomware
own initiatives. (4)
Initiative) that might be
applicable.
4 points
Limited use of appe Evidence may not b relevant. (1)
Important: To confirm your chosen topic and country, please send an email to your lecturer with the subject line “Assignment 1 Topic Confirmation – [Your Name] – [Your Student ID]”. In the email, clearly state your chosen topic and the country you will be focusing on for the legislated cyber security regulation.
Instructions for Writing the Research Report (1000 Words)
Your final report must include the following sections:
Assignment Cover Page: Use the provided cover sheet. Include the Title, Assignment number, Student Names and IDs, and Subject.
Executive Summary and Conclusion: Summarize the entire document with key findings. Ensure it is accurate and appropriately deduces conclusions from the evidence.
Body (Numerous headings and text at the write choice): This section should cover the core of your research.
o Research and Discuss Cyber Issues Concern: Introduce your report and explain the relevance of the chosen cyber issue. You need to comprehensively research and justify the concern. o Identify and Compare Your Chosen Country and Applicable Laws in Each Region (Australian-Pacific, Europe, America, and Asia): Describe with appropriate laws and critically compare each region’s legal requirements related to your topic. This requires a comprehensive identification and comparison of all applicable laws across these global regions.
o Recommend What Type of Policy/Procedures an Organisation Should Have in Place on This Issue: Identify what measures an organisation should implement, including the development of relevant policies. Comprehensively identify policy/procedures needed to combat the cyber issue.
o Recommend Any Other Initiatives (For example, Counter Ransomware Initiative) That Might Be Applicable: Conclude your report with key laws and recommendations, including other relevant initiatives. Comprehensively explain initiatives and, where appropriate, develop your own initiatives.
References/Bibliography: Provide a comprehensive list of all sources used.
Appendix (including references): Include screenshots of activities such as laws, comparisons of regions, etc.. Demonstrate efficient use of the Appendix, ensuring it supports the collected evidence, and use appropriate reference citation.
Submission Instructions
All submissions are to be submitted through Turnitin. Drop-boxes linked to Turnitin will be set up in Learning Management System (LMS). Assessments not submitted through these drop- boxes will not be considered. The Turnitin similarity score will be used to determine any plagiarism of your submitted assessment. Turnitin will check conference websites, Journal articles, online resources, and your peer’s submissions for plagiarism. You can see your Turnitin similarity score when you submit your assessments to the appropriate drop-box. If your similarity score is of concern, you can change your assessment and resubmit. However, re-submission is only allowed before the submission due date and time. No excuse will be accepted due to file corruption, absence from lecture.
The report should have a consistent, professional, and well-organized appearance. Also:
Ensure that the filename for your submission follows this format: YourName-YourStudentID.docx The assignment must adhere to the following formatting guidelines: 12-point font size, single line spacing, and clear section headings.
Reports must be submitted electronically as a single Microsoft Word document, through the Turnitin enabled submission link on the Learning Management System (LMS).
Submissions in zip file format will not be accepted.
Assignments submitted on the LMS will only be accepted. Submission of assignments through email is not acceptable.
Note: All work is due by the due date and time. Late submissions will be penalized at 20% of the assessment final grade per day, including weekends. You cannot make re-submissions after the cut-off date.
Assessment 2: Case Study Report
Overview
Weight Length Due date ULO
Introduction
In this individual assessment, you will develop the cybersecurity policy, procedures, or guidelines for an organisation. Your findings should be delivered in a written report. For the given case study (below) write the Data Security and Privacy Policy for the case study presented below. Use an appropriate template to complete the report as shown in the report structure section.
Report Structure
Use an appropriate policy template. For Example:
CONTENTS
1 PURPOSE
2 SCOPE
3 POLICY STATEMENT
<Sub-headings are not numbered>
4 PROCEDURE
<Sub-headings are not numbered>
5 RESPONSIBILITIES
Compliance,
monitoring
and review
Reporting
Records management
6 DEFINITIONS
Terms and definitions <delete if not required>
7 RELATED LEGISLATION AND DOCUMENTS
8 FEEDBACK
9 APPROVAL AND REVIEW DETAILS
10 APPENDIX <or APPENDICES> <delete if not required>
Case Study
ULO2, U Young Minds Secondary College (YMSC) is a private Australian secondary school that has been operating for several years, developing innovative programs for its students. Its staff has grown from 15 to 120 and the school enrols 700 students across level 7 to 12. YMSC has been growing steadily over the past 10 years. They have built strong relationships with the community and parents tend to send all their children to the school as well as recommending it to other parents. The owners anticipate continued growth and are planning to purchase another school to set up another campus.
YMSC is owned and operated by a group of parents who originally wanted to create an alternative education for their children. Their children have since finished school but the school was so successful in growth and is now managed by Joline Schack. The school’s IT facilities have grown along with the school, and it now employs 2 full time staff (Tim and Abishek to keep the system running, as along with a program coordinator, Carol, who assists teachers to incorporate computing within their programs).
Joline can foresee a time in the near future where they employ over 300 people across two campuses. Their staff are mostly teachers, though the school does have a Human Resources manager, and Accounts Manager, several administrative assistants (receptionist, office manager, secretary), and grounds staff.
You have very recently been contracted to solve an area of concern to the owners – information security. The school’s security measures have been developed in a largely uncoordinated fashion and it has been suggested by Joline that information security could threaten the survival of the
school. You have been given access to all staff for assistance in determining the security needs for YMSC.
In fact, it is Joline that has initiated your hiring. She encountered a little resistance from current ICT staff, arguing that continuing with the current approach is satisfactory. That approach has been one without a formal policy where security has been built in an ad-hoc, piecewise manner.
They would both say that the current policy has worked well enough up to now, thanks to the knowledge and expertise within the team.
Joline would like to have Tim more onside with the structured and formal approach that you will bring. In an attempt to get that support, Joline has asked you to begin your role with YMSC by developing a report that discusses how information security could be better managed by YMSC.
While this report will largely be about general principles, she would also like you to go into detail on one specific issue as a means of further demonstrating the usefulness of your formal approach. She would like you to go into detail about a development that both she and Tim are very concerned about, problems that will be introduced by opening a second campus. You have decided that you will choose one aspect of that development and draw up a Risk Management Plan for it and include a recommendation based on a Cost-Benefit Analysis.
The Young Minds Secondary College Mission Statement
YMSC believes in providing students with an innovative educational program in a secure and modern educational environment. Hardware and Software
The school currently uses commercial applications products for its processes. This includes a learning management system (Moodle), MSOffice, accounts and finance (Business One), a VOIP telephone system internally and several mobile phones for staff use. The school has a LAN infrastructure and it uses Wi-Fi throughout the campus. All employees that require regular access to school systems are supplied with a desktop laptop – depending on their needs. Students must have their own laptop or notebook and can access the school’s network through the Wi-Fi system. Some of the school’s systems need to be accessed from off campus. The school does have a print and file servers. All data for school management is backed up to cloud services provided by a local ICT provider. Email has been contracted to Microsoft.
You can envision other hardware, software, and information/data management procedures as you deem appropriate.
Marking Guide: 30 Marks
Task: Data Security Policy Description
Purpose and Scope Appropriate define the purpose and the scope of the policy.
Describe who is responsible person at each stage of the procedure.
Relative legislation and other policies
Describe how legislation and other policy affects this policy.
Determine appropriate feedback, approval and reviews for this policy.
Task: Privacy Policy Description
Purpose and Scope Appropriate define the purpose and the scope of the policy. Procedures and Responsibilities Describe who is the responsible person at each stage of the procedure. Relative legislation and other policies Describe how legislation and other policy affects this policy.
Determine appropriate feedback, approval and reviews for this policy.
Marking criteria/Rubric
You will be assessed on the following marking criteria/Rubric: Data Security Policy
Assessment
Exceptional >=80% Admirable 70% –
Creditable 60% – Acceptable 50% –
Unsatisfactory
criteria
79%
69%
Purpose and Scope are
C1. Purpose clear, concise, and
Purpose and Scope are mostly clear, concise,
Purpose and Scope are adequately clear,
59%
Purpose and Scope are limited and may not be
<=49
Purpose and Scope are either missing or not clear
and Scope
(1)
relevant to the case study (3)
and relevant to the case study (2.5)
concise, and relevant to the case study (2)
clear, concise, and relevant to the case
ed or
Academ
3 points
study (1.5)
ic
Miscon duct. (0)
Comprehensively and
C2.
clear procedures are
Procedures clearly defined and the
and
responsibilities are
Responsibiliti clearly identified (5)
es
Mostly clear and procedures are clearly defined and the
responsibilities are clearly identified (3.5)
Appropriate clear and procedures are clearly defined and the
responsibilities are clearly identified (3)
Adequately clear procedures are clearly defined and the responsibilities are adequately identified (2.5)
Procedures and
Responsibilities are missing or not clear. (1)
Not Submitted or
Academic Misconduct. (0)
5 points
Comprehensively list of
C3. Relative
clear appropriate
legislation
legislations and policies.
and other (4)
Mostly relative legislation and policies. (3)
Appropriate relative legislation and policies are missing or not addressed. (2.5)
Adequate relative legislation and
policies are missing or not addressed. (2)
Relative legislation and other policies are missing or not clear (1)
Not Submitted or
policies 4 points
Academic Misconduct. (0)
Privacy Policy
Assessment criteria
C1. Purpose and Scope
3 points
Exceptional >=80%
Purpose and Scope are clear, concise, and relevant to the case study (3)
Admirable 70% – 79% Purpose and Scope are
mostly clear, concise, and relevant to the case study
(2.5)
Creditable 60% – 69% Purpose and Scope are
adequately clear, concise, and relevant to the case study (2)
Acceptable 50% – 59% Purpose and
Scope are limited and may not be clear, concise, and relevant to the case study (1.5)
Unsatisfactory <=49
Purpose and Scope are either missing or not clear (1) Not Submitted or Academic
Misconduct. (0)
C3. Relative legislation and other policies
4 points
Comprehensive list of clear
appropriate legislations and policies. (4)
Mostly relative legislation and policies. (3)
Appropriate relative
legislation and policies are missing or not addressed. (2.5)
Adequate
relative
legislation and policies are missing or not addressed. (2)
Relative
legislation and other policies are missing or not clear (1)
Not Submitted or Academic
Misconduct. (0)