Requirements to Pass this Unit

To pass this unit you must:

• Attempt all assessments, and
• Achieve a total mark equal to or greater than 50%, and
• Participate in the Industry Presentation at the end of Week 13

Late Assessment Submission

Late assessments are not accepted in this unit unless a Special Consideration has been submitted and approved.

Special Consideration

The Special Consideration Policy aims to support students who have been impacted by short-term circumstances or events that are serious, unavoidable and significantly disruptive, and which may affect their performance in assessment.

Written Assessments: If you experience circumstances or events that affect your ability to complete the written assessments in this unit on time, please inform the convenor and submit a Special Consideration request through ask.mq.edu.au.

Weekly practice-based tasks: To pass the unit you need to demonstrate ongoing development of skills and application of knowledge in all the weekly practical classes. If you miss a weekly practical lass due to a serious, unavoidable and significant disruption, contact your convenor ASAP and the other members of your practical group. 

Note that a Special Consideration should only be applied for if you miss more than two of the weekly practical classes.

Assessment Tasks

Name	Weighting	Hurdle	Due
Quiz 1	10%	No	Immediately after the end of the Week 04 lecture
Mid-semester workbook assessment	40%	No	2355 Sunday Week 08
Quiz 2	10%	No	Immediately after the end of the Week 09 lecture
Industry Presentation	40%	Yes	0830-1300 Saturday 2-NOV-2024 on-campus in lecture room

Quiz 1

Assessment Type ¹: Quiz/Test Indicative Time on Task ²: 10 hours Due: Immediately after the end of the Week 04 lecture Weighting: 10%

A multiple choice quiz covering material from weeks 1-4

On successful completion you will be able to:

• Describe and explain the differences between security frameworks and standards
• Describe and demonstrate how to manage commercial risk, and unmitigated and mitigated risk
• Identify and assess commercial threats and types of threats and statutory requirements in a commercial environment
• Identify and analyse basic risk management errors and information exposures; assess various techniques and their suitability as controls

Mid-semester workbook assessment

Assessment Type ¹: Practice-based task Indicative Time on Task ²: 40 hours Due: 2355 Sunday end of Week 08 Weighting: 40%

Review and assessment of the workbook content that contains results from tasks undertaken from weeks 1-8.

On successful completion you will be able to:

• Describe and explain the differences between security frameworks and standards
• Describe and demonstrate how to manage commercial risk, and unmitigated and mitigated risk
• Identify and assess commercial threats and types of threats and statutory requirements in a commercial environment
• Identify and analyse basic risk management errors and information exposures; assess various techniques and their suitability as controls

Quiz 2

Assessment Type ¹: Quiz/Test Indicative Time on Task ²: 10 hours Due: Immediately after the end of the Week 09 lecture Weighting: 10%

A short-answer quiz covering material from weeks 5-9

On successful completion you will be able to:

• Describe and demonstrate how to manage commercial risk, and unmitigated and mitigated risk
• Identify and assess commercial threats and types of threats and statutory requirements in a commercial environment
• Identify and analyse basic risk management errors and information exposures; assess various techniques and their suitability as controls

Industry Presentation

Assessment Type ¹: Viva/oral examination Indicative Time on Task ²: 40 hours Due: 0830-1300 Saturday 2-NOV-2024 on-campus in lecture room Weighting: 40% This is a hurdle assessment task (see assessment policy for more information on hurdle assessment tasks)

Presentation of completed tasks to an external panel of Industry Experts

On successful completion you will be able to:

• Describe and explain the differences between security frameworks and standards
• Describe and demonstrate how to manage commercial risk, and unmitigated and mitigated risk
• Identify and assess commercial threats and types of threats and statutory requirements in a commercial environment
• Identify and analyse basic risk management errors and information exposures; assess various techniques and their suitability as controls

This unit is delivered face-to-face, although the lectures are recorded and available on iLearn.

The practical tasks start in Week 01 and builds, week upon week, to a single deliverable assessed on the Saturday of Week 13 by a panel of Industry Experts.  The work undertaken on the practical task and its deliverable is usually undertaken by students, sometimes working in groups, off-campus at a time and location that suits them.

Each week, based on the lecture and workshop materials provided, you will gradually build an Information Security Management System (ISMS) that used the ISO/IEC:27001 standards as the framework.  In Week 08, the documentation you have created will be reviewed by the Unit Convenor and, if significant changes are required, you will work with the Unit Convenor to modify what you are doing and how you are doing it.

This unit is very heavily front-loaded, that means that the first eight weeks require significant individual work to ensure that you are able to produce the documents required for the Week 13 presentation.

Methods of Communication

We will communicate with you via your university email and through announcements on iLearn. Queries to convenors can either be placed on the iLearn discussion board or sent to the unit convenor via the contact email on iLearn.

COVID Information

For the latest information on the University’s response to COVID-19, please refer to the Coronavirus infection page on the Macquarie website: https://www.mq.edu.au/about/coronavirus-faqs. Remember to check this page regularly in case the information and requirements change during semester. If there are any changes to this unit in relation to COVID, these will be communicated via iLearn.

The unit is divided into three modules, Governance (Weeks 01-04), Risk (Weeks 05-08) and Operations (Weeks 09-12).

• Quiz 1 in Week 04 covers Module 1
• Quiz 2 in Week 09 covers Module 2
• There is no Quiz for Module 3 as all modules will be covered as part of your Industry Presentation.

1. Introduction
2. Standards & Governance
3. ISMS
4. Information Classification
5. Risk Management
6. Qualitative Risk
7. Quantitative Risk
8. Loss Calculations
9. Threats and Controls
10. BCP/DRP
11. Incident Management
12. Forensics
13. Industry Panel preparation

We value student feedback to be able to continually improve the way we offer our units. As such we encourage students to provide constructive feedback via student surveys, to the teaching staff directly, or via the FSE Student Experience & Feedback link in the iLearn page.

Student feedback from the previous offering of this unit was very positive overall, with students pleased with the clarity around assessment requirements and the level of support from teaching staff. As such, no change to the delivery of the unit is planned, however we will continue to strive to improve the level of support and the level of student engagement.

However, to improve the learning and assessment processes, alterations to the weeks in which content is deliverd was made to more closely align to a modularised structure.