CSI2102 Information Security

In this Assignment you will be required to perform a basic risk assessment and apply concepts covered from weeks 1 through 9. The deliverable is a (maximum 2000) word report detailing information security recommendations associated with a small dance club.

· Introduction, introduce your report and what you will cover

· Identify and categorise information assets. This includes both digital and physical assets. Minimum of 20 assets (max 30). Assets should be categorised

· Prioritise the information assets using a weighted factor analysis

· Identify threats and vulnerabilities to the information assets. Given the amount of threats a threat category may suffice, i.e., for the CMS you may simply use the threat category software attacks

· Classify the information assets using an information classification schema

· Create a risk rating for each asset. You may use the simple method (likelihood * impact)

· Include with your risk assessment table a control strategy, i.e., mitigate, defend, accept

· Recommend security controls where necessary, i.e., access control

· Reference ISO27001 / ISO27002 where appropriate