information security

Australian Institute of Higher Education CRICOS Provider Code: 03147A

Level 3 & 4 545 Kent Street Sydney NSW 2000 Australia T: +612 9020 8050 W: www.aih.nsw.edu.au

Assessment Details

Total Marks: 30

Length Minimum = 1,800 Maximum = 2,200 words

Report Type Individual Report

Assignment This report gives you the opportunity to research, formulate, develop and document a basic security policy for a specific organization in Australia. Moreover, you are required to analyze, record, resolve security incidents and identify and assess the threats to, and vulnerabilities of the organisation’s networks. This report will use many of the concepts and techniques discussed in this unit throughout the semester. Please note, you will need to either choose from the list of examples of the industries provided below or come up with your own idea for a chosen specific organisation.

 Banking/Mortgage

 Hospital/Medical Centre

 Supermarket

 Vehicle rental

 Tourism agency

 Hotel/Motel

Unit Name/Code ISY2003/ISY203 Information Security

Assessment Type Report

Assessment Number Assessment Three

Assessment Name Report

Unit Learning Outcomes Assessed

LO3 - Research, develop, and document a basic security policy, and analyse, record, and resolve all security incidents LO4 - Identify and assess the threats to, and vulnerabilities of networks

Due Date and Time Friday, 21st September, 2018 by 5:00pm

Weighting 20%

Assessment Description

This assessment is designed to help students to research and analyze hot topics related to information security.

Detailed Submission Requirements

Submit a word document through Turnitin in the unit Moodle page

Australian Institute of Higher Education CRICOS Provider Code: 03147A

Level 3 & 4 545 Kent Street Sydney NSW 2000 Australia T: +612 9020 8050 W: www.aih.nsw.edu.au

 School/University

 Library

 Aviation operator

 Property Management Please discuss your chosen organisation and or ideas with your lecturer before you start your research. You might NOT be allowed to choose the same or similar specific organisation as other student in your class. You should aim at research, develop, and document answers to questions (a.) and (b.) below. Do not copy the examples of information security policies used in class!

You should state clearly:

 the name of the organisation you have chosen

 the stakeholders of the organisation

 the nature of the business and

 answer questions (a) and (b). Questions:

(a.) Research, formulate, develop and document a strategic security policy for your chosen

organisation based on the nature of the organisation and the stakeholders in the

organisation.

(b.) Based on the security policy you have researched, formulated, developed and documented

in the item (a.) above, identify and assess the potential threats and vulnerabilities of the

company’s network and discuss how such threats and vulnerabilities can be mitigated based

on your research.

Referencing and Plagiarism All information in the report should be in your own words and not copied from other sources. Any idea used should be referenced appropriately according to AIH policies and procedures. The report will be submitted through Turnitin and similarities may attract large penalties according to AIH policies and procedures. Please refer to the AIH Academic Misconduct Policy: http://www.aih.nsw.edu.au/content/1-home/8-more- info-tabs/3-official-policies/academic-misconduct-policy.pdf It is essential to use IN TEXT referencing. If you are using the exact words from a reference then you must use quotation marks. You can use Harvard Style referencing with numbers, with a listing at the end of the report. Microsoft Word has an EndNote plugin that makes this style very easy and clear to follow. https://library.sydney.edu.au/subjects/downloads/citation/Harvard_Complete.pdf

Australian Institute of Higher Education CRICOS Provider Code: 03147A

Level 3 & 4 545 Kent Street Sydney NSW 2000 Australia T: +612 9020 8050 W: www.aih.nsw.edu.au

DO NOT COPY AND PASTE FROM THE INTERNET OR COPY OTHER STUDENTS’ WORK! Submission You are required to submit a digital copy of the report to Turnitin on Moodle by Friday 21st September, 2018. You will NOT need to submit a hard copy. Late submissions will attract a 5% late penalty (of the maximum mark) per day (or part thereof) as per the late submission policy. Report Structure

 Cover Page - your name, ID, subject, date, report title and WORD COUNT

 Executive Summary

 Table of Contents - listed sections (and sub-sections if required)

 Introduction - Brief and clear introduction

 Body

 References-listing of all cited literature. A small number of high-quality references strategically used is the main aim here.

Formatting Guide Font: Times New Roman 12pt for paragraph text, 14pt bold for headings, with single paragraph breaks between paragraphs. Line Spacing: 1.5, Margins: 2cm all around Alignment: left-aligned. Page numbering: Insert page number

Australian Institute of Higher Education CRICOS Provider Code: 03147A

Level 3 & 4 545 Kent Street Sydney NSW 2000 Australia T: +612 9020 8050 W: www.aih.nsw.edu.au

Marking Guide

Element Ranking

1 2 3 4 5 Possible marks

Actual marks

Poor Fair Good Very good Excellent

Format, Sources, and grammar

Basic and partially correct format, non- contemporary low-quality articles, scholarly language not used and poor attention to detail Little evidence of smooth linking and logical linking 1 mark

Basic and partially correct format, less recent fair-quality articles, scholarly language not used and poor attention to detail Few sections/paragraphs smoothly and logically linked 2 marks

Clear and correct format, recent fair- quality articles, scholarly language partly used and good thorough attention to detail Some sections/ paragraphs smoothly and logically linked 3 marks

Clear and correct format, recent high- quality articles, scholarly language mostly used and quite thorough attention to detail Most sections/ paragraphs smoothly and logically linked 4 marks

Clear and correct format, recent high- quality articles, scholarly language throughout and thorough attention to detail sections/ paragraphs smoothly and logically linked 5 marks

5

Research, formulate, develop and document a strategic security policy for your chosen organisation

Very basic research and documentation of a strategic security policy 1 mark

Some basic research and documentation of a strategic security policy 2 marks

Good basic research and documentation of a strategic security policy 3 marks

Sound overall research and documentation of a strategic security policy 4 marks

Detailed and excellent with research and documentation of a strategic security policy 5 marks

5

identify and assess the potential threats and vulnerabilities

Very basic identification and assessment of the potential threats and vulnerabilities 1 mark

Some basic identification and assessment of the potential threats and vulnerabilities 2 marks

Good basic identification and assessment of the potential threats and vulnerabilities 3 marks

Sound overall identification and assessment of the potential threats and vulnerabilities and mitigation 4 marks

Detailed and excellent identification and assessment of the potential threats and vulnerabilities 5 marks

5

Discuss how such threats and vulnerabilities can be mitigated

Very basic mitigation of the potential threats and vulnerabilities 1 mark

Some basic mitigation of the potential threats and vulnerabilities 2 marks

Good basic mitigation of the potential threats and vulnerabilities 3 marks

Sound overall mitigation of the potential threats and vulnerabilities 4 marks

Detailed and excellent mitigation of the potential threats and vulnerabilities 5 marks

5

Australian Institute of Higher Education CRICOS Provider Code: 03147A

Level 3 & 4 545 Kent Street Sydney NSW 2000 Australia T: +612 9020 8050 W: www.aih.nsw.edu.au

Analysis, argument and cover all requirements (•the name of the organisation you have chosen •the stakeholders of the organisation •the nature of the business and)

Very basic analysis evident but no depth, critique or insight. Only few requirements covered. 1 mark

Some basic analysis evident but no critique or insight. Some requirements covered. 2 marks

Good basic analysis lacking critique and insight. All requirements covered. 3 marks

Sound overall analysis with limited critique and insight. All requirements covered. 4 marks

Detailed analysis with evidence of critique and insight. All requirements covered 5 marks

5

Referencing

Little or no evidence of any citations or reference list 1 mark

Referencing skills minimally intact, inaccurate and with multiple errors 2 marks

Referencing skills partially intact, partially accurate and used with some errors 3 marks

Referencing skills mainly intact, accurate and well-used with some errors 4 marks

Referencing skills fully intact, accurate and well-used no obvious errors 5 marks

5

TOTAL 30