Late Submission

No extensions will be granted without an approved application for Special Consideration. There will be a deduction of 10% of the total available marks made from the total awarded mark for each 24 hour period or part thereof that the submission is late. For example, 25 hours late in submission for an assignment worth 10 marks – 20% penalty or 2 marks deducted from the total.

Under no circumstances will submissions will be accepted after solutions have been posted.

Module Examinations

Module Examinations will be scheduled during tutorial timeslots in weeks 5, 9 and 13, and will generally replace that week's tutorial. Your attention is drawn to the university's 'Fit to Sit' policy, which states that by commencing an examination you are certifying yourself as fit to sit that examination. In particular, if you commence a Module Examination late, with insufficient time to finish it, you will not be offered a Supplementary Examination. It is the responsibility of students to make sure that they are aware of the time at which the Module Exam will commence.

Supplementary Examinations

Applications for Supplementary Examinations under the Disruption to Studies Policy must be made via AskMQ. If this is approved, the Unit Convenor will attempt to schedule an examination at a time convenient to the student and will notify the student of the date and time of the examination in a timely fashion.

Textbooks and Readings

Each lecture will require the student to read a provided text selected from a range of cyber security frameworks, Standards, textbooks, guides to best practice, blogs and other sources. Readings will be posted on iLearn and must be completed before the tutorial workshop, as the workshops are highly interactive.

A suggested (and highly recommended) textbook for cyber security studies generally is Smith, Richard E., Elementary Information Security, 3rd ed., Jones & Bartlett Learning, 2020.

Relevant international Standards have been purchased by the University Library and placed in Reserve for use by COMP3320/6325 students.

Lectures

The lecture content of this unit will be delivered in the form of short videos elaborating on the concepts introduced in the readings. Guest lecturers and interview subjects will provide 'real-world' case studies and examples. There will be approximate two hours of lecture content each week, which students can view at their own pace.

Tutorial Workshops

Students will be expected to participate in weekly tutorial workshops, which will be offered in both on campus (face-to-face) and online (Zoom meeting) format.

Cyber security management is, in large part, about communicating threats and risks to business executives and understanding how to achieve the enterprise's goals while dealing with those threats and risks. Students should therefore expect to develop and make use of their speaking skills during the workshop sessions, and/or their writing skills during post-workshop discussions on iLearn. The importance of engaging in this is reflected in the allocation of 15% of the total assessment to these activities.

The unit comprises three major modules, each separately examinable.

Module 1: Governance and Compliance

• Introduction and Overview
• Business and security operations
• Governance, legal and regulatory, frameworks, standards and compliance
• Security architecture, authentication and access control models
• The Human Factor: Policies, culture and communication

Module 2 - Information Risk Management

• Introduction to Information Risk Management
• Threat Intelligence, Qualitative Risk Management
• Estimation, Calibration and Quantitative Risk Management
• Advanced Risk Management

Module 3 - Security Operations

• Business Continuity and Disaster Recovery Planning
• The Incident Response Cycle
• Incident Analysis, logs and SIEM
• Digital Forensics and Evidence Management