General Faculty Policy on assessment submission deadlines and late submissions: 

Online quizzes, in-class activities, or scheduled tests and exam must be undertaken at the time indicated in the unit guide. Should these activities be missed due to illness or misadventure, students may apply for Special Consideration.

All other assessments must be submitted by 5:00 pm on their due date.

Should these assessments be missed due to illness or misadventure, students should apply for Special Consideration.

Assessments not submitted by the due date will receive a mark of zero unless late submissions are specifically allowed as indicated in the unit guide or on iLearn.

Late submissions are NOT permitted.

Under no circumstances will submissions will be accepted after solutions have been posted.

Module Examinations

Module Examinations will be scheduled during the second hour of the weekly lecture in weeks 5, 9 and 13, and will replace that week's second hour of lectures; there is no SGTA scheduled for Weeks 05/09/13. Your attention is drawn to the university's 'Fit to Sit' policy, which states that by commencing an examination you are certifying yourself as fit to sit that examination. In particular, if you commence a Module Examination late, with insufficient time to finish it, you will not be offered a Supplementary Examination. It is the responsibility of students to make sure that they are aware of the time at which the Module Exam will commence.

Supplementary Examinations

Applications for Supplementary Examinations under the Disruption to Studies Policy must be made via AskMQ. If this is approved, the Unit Convenor will attempt to schedule an examination at a time convenient to the student and will notify the student of the date and time of the examination in a timely fashion.

Weekly Tasks

Assessment Type ¹: Quiz/Test Indicative Time on Task ²: 5 hours Due: Each week Weighting: 20%

Each week material will be followed by a short quiz to test student understanding. The final mark will be calculated from the best 10 of 12 scores achieved by the student.  Zero/non-attempted quiz marks are included in the average calculation.

On successful completion you will be able to:

• Use international frameworks and Standards to develop cyber security policies, standards and procedures as part of an information security management system, including legal and regulatory compliance.
• Use qualitative and quantitative risk assessment techniques to both manage cyber security risk by selecting controls and to communicate risk management strategies to business stakeholders.
• Manage operational security by developing plans to support business continuity and cyber incident response, including digital forensics and evidence management.

Module Exam #1

Assessment Type ¹: Examination Indicative Time on Task ²: 7 hours Due: Week 5 Weighting: 15%

A 50 minutes long online written examination worth 20% that will be held in week 5 during the second hour of lectures. This will test your understanding of material covered in weeks 1 to 4.

On successful completion you will be able to:

• Use international frameworks and Standards to develop cyber security policies, standards and procedures as part of an information security management system, including legal and regulatory compliance.

Module Exam #2

Assessment Type ¹: Examination Indicative Time on Task ²: 7 hours Due: Week 9 Weighting: 15%

A 50 minutes long online written examination worth 20% that will be held in week 9 during the second hour of lectures. This will test your understanding of material covered in weeks 5 to 8.

On successful completion you will be able to:

• Use qualitative and quantitative risk assessment techniques to both manage cyber security risk by selecting controls and to communicate risk management strategies to business stakeholders.

Module Exam #3

Assessment Type ¹: Examination Indicative Time on Task ²: 6 hours Due: Week 13 Weighting: 15%

A 50 minutes long online written examination worth 20% that will be held in week 13 during the second hour of lectures. This will test your understanding of material covered in weeks 9 to 12.

On successful completion you will be able to:

• Manage operational security by developing plans to support business continuity and cyber incident response, including digital forensics and evidence management.

Assignment

Assessment Type ¹: Project Indicative Time on Task ²: 24 hours Due: Week 11 Weighting: 35%

In this assignment, the student is required to complete a research project into current Cyber Security matters in the news, that reinforce the material in Modules 1 and 2.

On successful completion you will be able to:

• Use international frameworks and Standards to develop cyber security policies, standards and procedures as part of an information security management system, including legal and regulatory compliance.
• Demonstrate the practical use of Information Security Risk Assessment in developing Management Policies and Procedures.

 If you need help with your assignment, please contact:

• the academic teaching staff in your unit for guidance in understanding or completing this type of assessment
• the Writing Centre for academic skills support.

² Indicative time-on-task is an estimate of the time required for completion of the assessment task and is subject to individual variation.

Textbooks and Readings

Each lecture will require the student to read a provided text selected from a range of cyber security frameworks, Standards, textbooks, guides to best practice, blogs and other sources. Readings will be posted on iLearn and must be completed before the tutorial workshop, as the workshops are highly interactive.

A suggested (and highly recommended) textbook for cyber security studies generally is Smith, Richard E., Elementary Information Security, 3rd ed., Jones & Bartlett Learning, 2020.

Relevant international Standards have been purchased by the University Library and placed in Reserve for use by COMP3320/6325 students.

Lectures

The lecture content of this unit will be delivered on campus - please check the timetables page for details. Guest lecturers and interview subjects will provide 'real-world' case studies and examples. There will be approximately two hours of lecture content each week, which students can view at their own pace if they are unable to attend the on-campus lecture.

Small Group Teaching Activities (SGTA)

Students should participate in weekly SGTA on campus; these activities vary between workshops, practical tasks and tutorials.

Cyber security management is, in large part, about communicating threats and risks to business executives and understanding how to achieve the enterprise's goals while dealing with those threats and risks. Students should therefore expect to develop and make use of their speaking skills during the sessions, and their writing skills during post-workshop discussions on iLearn.

The unit comprises three major modules, each separately examinable.

Module 1: Governance and Compliance

• Introduction and Overview
• Business and security operations
• Governance, legal and regulatory, frameworks, standards and compliance
• Security architecture, authentication and access control models
• The Human Factor: Policies, culture and communication

Module 2 - Information Risk Management

• Introduction to Information Risk Management
• Threat Intelligence, Qualitative Risk Management
• Estimation, Calibration and Quantitative Risk Management
• Advanced Risk Management

Module 3 - Security Operations

• Business Continuity and Disaster Recovery Planning
• The Incident Response Cycle
• Incident Analysis, logs and SIEM, Security Orchestration and Response
• Digital Forensics and Evidence Management, Crisis Management and Crisis Communications

1. There is no longer a mark for weekly participation, either by attendance or by iLearn activity.
2. There is only one assignment, now worth 35% of the unit total, it is an individual assessment covering the material in Weeks 01-08 inclusive.
3. Weekly quizzes are now worth 20% of the unit total and not 10% of the unit total.
4. Weekly quiz marks calculation has changed; *ALL* weekly quiz marks, including zero/not-attempted marks, are now included in the averaging process so not attempting a quiz will lower your average.