SIT763-Cyber Security Management

Task

Brief Description

This task requires you to demonstrate the ability to conduct an investigation of security management issues in corporate organisations based on a real-life case study as outlined in the background information provided below, and write a report.

In your report, you will be required to follow prescribed procedures to evaluate risk levels and the potential impact of threats and vulnerabilities for a real-life organisation. You will be assessed on your ability to analyse the security requirements and objectives of the organisation as well as the efficacy of the risk management strategies that they’ve implemented.

Background information

Your report will be based on a real-lifesituation.The Australian government has developed the Notifiable Data BreachesScheme, anational scheme that legallyrequires Australian organisations to report if they are victims of a cyberincident.Based on the analysis of the quarterly reports,your task is to write are port that includes the following:

• A security risk assessment that identifies the cybersecurity risks,threats and vulnerabilities that the quarterly reports have identified (these can be technical or business risks).

•A business requirements analysis(major cyber issues that impact businesses)that assessest hebusiness requirementsbased upon your quarterly reportsanalysis,this may include technical, policy, human and governance aspects.