Students

ACCG3058 – Managing Digital Risk in Organisations

2026 – Session 1, In person-scheduled-weekday, North Ryde

General Information

Download as PDF
Unit convenor and teaching staff Unit convenor and teaching staff Unit Convenor / Lecturer
Matthew Mansour
matthew.mansour@mq.edu.au
Check ilearn
Check ilearn
Moderator
Ali Amrollahi
ali.amrollahi@mq.edu.au
N/A
Credit points Credit points
10
Prerequisites Prerequisites
130cp at 1000 level or above
Corequisites Corequisites
Co-badged status Co-badged status
BUSA3058
Unit description Unit description

This unit provides a comprehensive understanding of managing digital risk in contemporary organisational contexts. The unit explores the complex nature of digital risks and their impacts on business operations, strategic planning, and regulatory compliance. Students will engage with modern digital risk management frameworks and regulatory standards. The unit equips students to critically evaluate current digital risk practices and develop innovative and practical solutions to address organisational challenges.

Throughout the unit, students will build graduate capabilities in key areas, including: critical analysis skills in digital risk assessment and management; problem-solving skills in identifying, analysing, and responding to emerging digital threats in multidisciplinary environments; and communication and presentation skills for effectively conveying risk management strategies to diverse stakeholder groups.

Important Academic Dates

Information about important academic dates including deadlines for withdrawing from units are available at https://www.mq.edu.au/study/calendar-of-dates

Learning Outcomes

On successful completion of this unit, you will be able to:

  • ULO1: Evaluate the importance of digital risk analysis in ensuring compliance based on contemporary frameworks and regulations.
  • ULO2: Assess digital risks and controls and their implications for organisations, including their impact on business operations and strategic decision-making.
  • ULO3: Evaluate modern techniques for conducting digital risk analyses, including threat modelling and vulnerability assessment.
  • ULO4: Develop and present a critical evaluation of digital risk management strategies and practices.
  • ULO5: Design comprehensive business continuity plans that integrate security awareness, training and education programs.

General Assessment Information

General Faculty Policy on assessment submission deadlines and late submissions: 

Assessment Task Release Dates:

Professional practice: Information systems audit report: To be released no later than 1st March

Skills development: Auditing information systems: To be released no later than 2nd April

Professional practice: Information systems analysis report​​​​​​​: To be released no later than 30th April

Late Assessment Submission Policy:

 

5% penalty per day: If you submit your assessment late, 5% of the total possible marks will be deducted for each day (including weekends), up to 7 days.

  • Example 1 (out of 100): If you score 85/100 but submit 20 hours late, you will lose 5 marks and receive 80/100.
  • Example 2 (out of 30): If you score 27/30 but submit 1 day late, you will lose 1.5 marks and receive 25.5/30.
  • After 7 days: Submissions more than 7 days late will receive a mark of 0.
  • Extensions:
  • Automatic short extension: Some assessments are eligible for automatic short extension. You can only apply for an automatic short extension before the due date.
  • Special Consideration: If you need more time due to serious issues and for any assessments that are not eligible for Short Extension, you must apply for Special Consideration

Special Consideration

The Special Consideration Policy aims to support students who have been impacted by short-term circumstances or events that are serious, unavoidable and significantly disruptive, and which may affect their performance in assessment. If you experience circumstances or events that affect your ability to complete the assessments in this unit on time, please inform the convenor and submit a Special Consideration request through connect.mq.edu.au.

 

Assessments where Late Submissions will be accepted 

In this unit, late submissions will be accepted as follows: 

Professional practice: Information systems audit report​​​​​​​: YES, Standard Late Penalties apply 

Skills development: Auditing information systems:   YES, Standard Late Penalties apply 

Professional practice: Information systems analysis report​​​​​​​:  YES, Standard Late Penalties apply 

Requirements to Pass this Unit

To be eligible to pass this unit, it is necessary to obtain a mark of at least 50% in the unit overall.

NB. SHORT EXTENSION option is only available in this unit if you apply for it prior to the due date.

AI in this unit:

Open AI

These assessments do not restrict the use of AI tools. They are designed on the assumption that you may use AI in the same way you would use other professional tools to help you think, plan, analyse, or refine your work. However, the final submission must be your own work, your own judgement, and your own voice. You are responsible for what you submit and must be able to explain and defend it if asked. NB. Final exams for this unit are closed booked exams.

 

Assessment Tasks

Name Weighting Hurdle Due Groupwork/Individual Short Extension AI assisted?
Professional practice: Information systems audit report 30% No 02/04/2026 Individual Yes Open AI
Skills development: Auditing information systems 30% No 30/04/2026 Individual Yes Open AI
Professional practice: Information systems analysis report 40% No 31/05/2026 Individual Yes Open AI

Professional practice: Information systems audit report

Assessment Type 1: Professional task
Indicative Time on Task 2: 25 hours
Due: 02/04/2026
Weighting: 30%
Groupwork/Individual: Individual
Short extension 3: Yes
AI assisted?: Open AI

The purpose of this assessment is for you to create an audit report aligned with industry expectations.

 

You will work on a real-world case study.

 

Skills in focus:

 

  • Discipline knowledge

  • Critical thinking and problem solving

  • Digital skills

  • Work readiness

 

Deliverable(s) : Written report [2500 words]

Individual assessment
On successful completion you will be able to:
  • Evaluate the importance of digital risk analysis in ensuring compliance based on contemporary frameworks and regulations.
  • Assess digital risks and controls and their implications for organisations, including their impact on business operations and strategic decision-making.
  • Evaluate modern techniques for conducting digital risk analyses, including threat modelling and vulnerability assessment.
  • Develop and present a critical evaluation of digital risk management strategies and practices.
  • Design comprehensive business continuity plans that integrate security awareness, training and education programs.

Skills development: Auditing information systems

Assessment Type 1: Portfolio
Indicative Time on Task 2: 25 hours
Due: 30/04/2026
Weighting: 30%
Groupwork/Individual: Individual
Short extension 3: Yes
AI assisted?: Open AI

The purpose of this assessment is for you to consistently build up your skills of auditing and assuring information systems.

 

You will consolidate and evaluate your learning throughout the session via a structured approach.

 

Skills in focus:

  • Discipline knowledge

  • Critical thinking and problem solving

  • Comnmunication skills

 

Deliverable(s): Reflective report [2500 words]

Individual assessment
On successful completion you will be able to:
  • Evaluate the importance of digital risk analysis in ensuring compliance based on contemporary frameworks and regulations.
  • Assess digital risks and controls and their implications for organisations, including their impact on business operations and strategic decision-making.
  • Evaluate modern techniques for conducting digital risk analyses, including threat modelling and vulnerability assessment.
  • Develop and present a critical evaluation of digital risk management strategies and practices.

Professional practice: Information systems analysis report

Assessment Type 1: Professional task
Indicative Time on Task 2: 40 hours
Due: 31/05/2026
Weighting: 40%
Groupwork/Individual: Individual
Short extension 3: Yes
AI assisted?: Open AI

The purpose of this assessment is for you to develop the capability of analysing an Information Systems scenario and producing a professional report in line with industry practice. You will analyse a real-world scenario, assess risks, controls and implications, use audit tools and techniques to create recommendations. Skills in focus:

 

  • Discipline knowledge
  • Critical thinking and problem solving
  • Work readiness
  • Digital skills

 

Deliverable(s): Written report [2500 words]

Individual assessment
On successful completion you will be able to:
  • Evaluate the importance of digital risk analysis in ensuring compliance based on contemporary frameworks and regulations.
  • Assess digital risks and controls and their implications for organisations, including their impact on business operations and strategic decision-making.
  • Evaluate modern techniques for conducting digital risk analyses, including threat modelling and vulnerability assessment.
  • Develop and present a critical evaluation of digital risk management strategies and practices.
  • Design comprehensive business continuity plans that integrate security awareness, training and education programs.

1 If you need help with your assignment, please contact:

  • the academic teaching staff in your unit for guidance in understanding or completing this type of assessment
  • the Writing Centre for academic skills support.

2 Indicative time-on-task is an estimate of the time required for completion of the assessment task and is subject to individual variation.

3 An automatic short extension is available for some assessments. Apply through the Service Connect Portal.

Delivery and Resources

Teaching and Learning Strategy

ACCG3058 is taught via lectures (Live in class - recorded by Echo) and tutorials (Live on campus).

Lectures are used to introduce new material, give IS Audit and Assurance examples, and put them in a broader context. Tutorials are small group classes that allow you to interact with your peers and with a tutor who has a sound knowledge of the subject. This also gives you a chance to practice your soft skills. NB. Tutorials start in week 2, and the Lectures start in week 1.

 

During lectures, you are encouraged to ask the lecturer questions to clarify anything you are unsure of. 

Each week, you should:

    •    Attend live lectures, take notes, ask questions

    •    Attend your tutorials and seek feedback from your tutor on your work

    •    Read assigned reading material, add to your notes and prepare questions for your lecturer or tutor

    •    Start working on any assessments immediately after they have been released.

Lecture PowerPoints are made available each week, but these PowerPoints are intended as an outline of the lecture and are not a substitute for your notes or reading additional material.

 

Classes

Each week, you should attend 1.5 hours of live lectures, and a 1.5-hour tutorial class. Please note that you are required to submit a certain number of assessments. Failure to do so may result in you failing the unit.  

Textbook

It recommended to access to the following textbook(s): Information Assurance Handbook 1e, Authors Corey Schou and Steven Hernandez, ISBN: 9781307383300 https://www.mheducation.com.au/9781307383300-aus-ebook-information-assurance-handbook-1e

Some copies of the text may also be available through the reserved section in the library. The content of this text forms the foundation of the unit, but material to be considered (and examined) will go beyond text content.

 

We will also use the textbook titled Cybersecurity: The Insights You Need from Harvard Business Review - which is available for free through the Macquarie Library. 

 

Technology used

iLearn: This unit will use iLearn as an online technology for students to access course material, announcements, and any other documents related to this unit. Students are required to regularly check the iLearn for accessing up-to-dated information about the unit.

Echo is a multi-media learning tool that provides audio of the lectures, which students can download and listen to at their convenience. Echo will be made available at the end of each week via the unit’s website (iLearn).

 

Unit Schedule

Week

Topic

Chapter

1

The Need to Manage Digital Risk in Modern Organisations

1 & 2

2

Digital Assets, Threats, and Risk Controls

3

3

Digital Risk Management Systems and Frameworks

5

4

Planning and Prioritising Digital Risks

6

5

Managing Digital Assets and Associated Risks

9 & 10

6

Managing Digital Assets and Associated Risks

14 & 15

7

Reading Week

 

8

Building Organisational Capability to Manage Digital Risk

16 & 17

9

Responding to Digital Risk Events and Incidents

21

10

Digital Investigations and Evidence in Risk Management

22

11

Business Continuity and Organisational Resilience

23

12

Industry Perspectives on Digital Risk

 

13

Managing Digital Risk in Practice

 

Policies and Procedures

Macquarie University policies and procedures are accessible from Policy Central (https://policies.mq.edu.au). Students should be aware of the following policies in particular with regard to Learning and Teaching:

Students seeking more policy resources can visit Student Policies (https://students.mq.edu.au/support/study/policies). It is your one-stop-shop for the key policies you need to know about throughout your undergraduate student journey.

To find other policies relating to Teaching and Learning, visit Policy Central (https://policies.mq.edu.au) and use the search tool.

Student Code of Conduct

Macquarie University students have a responsibility to be familiar with the Student Code of Conduct: https://students.mq.edu.au/admin/other-resources/student-conduct

Results

Results published on platform other than eStudent, (eg. iLearn, Coursera etc.) or released directly by your Unit Convenor, are not confirmed as they are subject to final approval by the University. Once approved, final results will be sent to your student email address and will be made available in eStudent. For more information visit connect.mq.edu.au or if you are a Global MBA student contact globalmba.support@mq.edu.au

Academic Integrity

At Macquarie, we believe academic integrity – honesty, respect, trust, responsibility, fairness and courage – is at the core of learning, teaching and research. We recognise that meeting the expectations required to complete your assessments can be challenging. So, we offer you a range of resources and services to help you reach your potential, including free online writing and maths support, academic skills development and wellbeing consultations.

Student Support

Macquarie University provides a range of support services for students. For details, visit http://students.mq.edu.au/support/

Academic Success

Academic Success provides resources to develop your English language proficiency, academic writing, and communication skills.

The Library provides online and face to face support to help you find and use relevant information resources. 

Student Services and Support

Macquarie University offers a range of Student Support Services including:

Student Enquiries

Got a question? Ask us via the Service Connect Portal, or contact Service Connect.

IT Help

For help with University computer systems and technology, visit http://www.mq.edu.au/about_us/offices_and_units/information_technology/help/. 

When using the University's IT, you must adhere to the Acceptable Use of IT Resources Policy. The policy applies to all who connect to the MQ network including students.

 

 

Changes from Previous Offering

- Chnage to Lecture material to align with the new course name

- Change to Tutorial material to align with the new course name.

- New assessments to reflect 3 assessment model (3AM)

Research & Practice, Global & Sustainability

This unit addresses global and sustainability issues as direct areas of study and as necessary implications arising from the materials, assessment and academic discussion and debate in classes/seminars. We promote sustainability by developing ability in students to research and locate information within accounting discipline. We aim to provide students with an opportunity to obtain skills which will benefit them throughout their career. The unit materials have a reference list at the end of each chapter/module/text containing all references cited by the author. These provide some guidance to references that could be used to research particular issues.

 

Unit information based on version 2026.03 of the Handbook