COIT20263 Information Security Management (HT1, 2020)

Assessment Item 1 – Written Assessment

Objectives

This assessment task relates to Unit Learning Outcome 2 and can be undertaken in a group of up to 4 students or individually. Distance students can form groups with on-campus students as well. In this assessment task, you will analyse the scenario given on page 3 and develop a report on the guidelines for the specified information security policy for the organisation given in the scenario.

Assessment Task

You are required to analyse the scenario given on page 3 and develop a report on the guidelines for an ‘Acceptable Use of the Network Policy’ for the organisation described in the scenario. You should ensure that you support the guidelines you prepare with references and justify as to why those guidelines are necessary.

Your report on guidelines should include:

1.      Executive Summary

2.      Table of Contents

3.      Introduction

4.      Discussion (Guidelines)

5.      Conclusion

6.      References

Note: You must follow the Harvard citation and referencing guidelines when writing your report.

Check the unit website at least once a week for further information relating to this assessment task. Please ensure that you write your report in your own words to avoid possible plagiarism and copyright violation. You can understand the Plagiarism Procedures by following the corresponding link in the CQUniversity Policies section of the Unit Profile.

Assessment Criteria

You are assessed on your ability to analyse the given scenario and prepare a report on the guidelines for the specified information security policy. The marking criteria for this assessment task are provided on page 4. You need to familiarise yourself with the marking criteria to ensure that you have addressed them when preparing the report for this assessment item.

Submission

Each one of you in the group must upload the same report through the COIT20263 Moodle unit website assessment block on or before the due date.

The Scenario for Information Security Management Assessment Tasks

Farmers 4 Farmers (F4F) is a cooperative society of farmers located in Brisbane, QLD, Australia. The company that designs and deploys the network for F4F has sub-contracted your company the task of developing a suitable information security management program for F4F.

F4F was established to supply fresh produce from the farmers to the clients who are retailers at a cost-effective and efficient manner. A second objective of F4F is to provide better prices for the produce to the farmers. A third objective of F4F is to provide fertilizer and other required items for the farmers.

The Brisbane office of F4F consists of the managing director, a data analyst, a logistics manager and an accountant. The data analyst will need to deal with large volumes of clients and sales data as well as product information of the farmers.

F4F has a fleet of delivery trucks that operate in various regions in QLD. Clients should be able to place their delivery orders for produce and pay using the web interface of F4F. Delivery vehicles collect the produce listed in the delivery orders from the closest farmers and deliver them to the clients. The clients can communicate with the delivery trucks and view the produce on line before giving their approval to purchase them. A software program ensures this whole process.

All financial transactions related to the farmers and the clients are handled by the Brisbane office. For the protection of client and business information, F4F has deployed a highly secure network for the Brisbane office and the delivery trucks.

Note: This scenario was created by Dr Rohan de Silva on 3rd January 2020 and no part of this scenario should be reproduced by any individual or organisation without written permission from CQUniversity, Australia.