Reference no: EM133553396 , Length: word count:3500

Assessment - Oral Presentation

Task Overview:

This document provides you with information about the requirements for your assessment. Detailed instructions and resources are included for completing the task. The Criterion Reference

Purpose

Through this assessment, you will develop your ability to:

1. Analyse and evaluate the potential risks associated information security vulnerabilities, attacks and threats and explain how security architecture, design and controls that can be applied to mitigate those potential risks;

2. Analyse systems and hardware failures and provide advice and guidelines on disaster recovery and business continuity plans for critical recovery of information and operational systems;

3. Evaluate and explain legal privacy and ethical situations to effectively managing information security; and

4. Communicate effectively both written and orally by providing advice and guidance on the risks and technical and people issues associated with management of information security to business managers and operational employees in organisations.

Case

Case Study: Optus Ransomware Attack

Australian telecommunications company Optus fell victim to a significant cyberattack and data breach in September 2022. Optus was hit by a cyber attack that compromised customer information. Information that may have been exposed includes customers' names, dates of birth, phone numbers and email addresses. For some customers, addresses and ID document numbers such as driver's licence or passport numbers have been exposed. The breach involved both current and former customers. Someone on an underground cybercrime forum claimed they stole the account data of 11.2 million people from Optus. They're demanding $1 million in cryptocurrency not to sell the information to other people. Otherwise, they said they will sell it in parcels.

* Note: Research this Optus Ransomware Attack in more detail.

In this assessment, you are required to:

• Put together a high-level Cyber Security Incident Response Report, as the IT Security Consultant, which provides:

• An executive summary,
• Background and problem analysis,
• A threat analysis,
• A legal ramifications assessment and
• A set of recommendations (lessons learnt from the Ransomware Attack in the case study).

• Present your Cyber Security Incident Response Report professionally, be concise and to the point for a senior management audience.

• Ensure this assignment is all your own work. It is acceptable to discuss course content with others to improve your understanding and clarify requirements, but solutions to assignment questions must be done on your own.

• Not copy from anyone, including artificial intelligence tools (such as ChatGPT), tutors and fellow students, nor allow others to copy your work.

Task description

Step 1: Task Understanding

• Read the Instructions and Checklist (Steps) carefully.
• Read the Guide: Rubrics in Cadmus Manual and then your Marking Rubric.

Step 2: Analyse Case

• Read The Case carefully and thoroughly.

• Gather relevant sources and materials to understand the Ransomware Attack better and get more details.

• Take notes on key points of the sources you gather, including main arguments, key concepts, and evidence presented.

• Include citations and references in your notes.

• Evaluate the credibility and reliability of the sources you gather, considering the author's expertise, the publication, and the publication date.

• Analyse the sources you have gathered, looking for patterns, themes and perspectives that will help

you to develop your own argument.

Step 3: Identify Problems

• Based on your analysis, outline the problems using this framework:

• Problem: what is the primary problem? Secondary problems?

• Evidence: what proof is there that these are the main issues?

• Symptoms: what are the symptoms of these problems?

• Relationship: how are the problems related? Independent? Related?

• Results: what are the ramifications? Short term? Long term?

Step 4: Solve Problems

• Based on your analysis, outline the potential solutions using this framework:

• Alternatives: what are all the possible solutions?

• Limitations: what limits are there on the possible solutions?

• Suitability: are the solutions reasonable given the circumstances?

• Costs: what are the costs? Advantages? Disadvantages?

• Outcome: which possible solution best solves the problem?

Step 5: Write Cyber Security Incident Response Report.

• Write your Cyber Security Incident Response Report using this structure:

Cover Page

Table of Contents

Executive Summary: half-page brief outlining background and problem analysis, threat analysis, legal ramifications and key recommendations ( 250 words).

Body of Report:

Brief Introduction

Background and problem analysis: Define what is a Ransomware Attack; analyse, evaluate and discuss the impact and extent of the Ransomware Attack as noted in the case study and its customers and business partners (20 Marks 750 words).

Threat Analysis: Analyse Ransomware Attack on the company in terms of how this might have occurred? In your answer consider what vulnerability / vulnerabilities and/or lack of security controls might have been exploited to realise this ransomware attack. (1000 words).

Legal Ramifications: Evaluate and explain what are the legal and privacy ramifications of a ransomware attack for company should the company paid the ransom? (500 words).

Set of Recommendations: Provide a set of recommendations to improve security posture of the company in terms of protection from a Ransomware attack. (1000 words). Your key recommendations should address the following:

• What are the key lessons learnt from this Ransomware Attack on the transport and logistic systems of the company in terms of applying security controls (physical, technical, administrative),

• What are the best practices and standards to improve protection (prevention, detection, recovery) and mitigate the risks arising from a ransomware attack?

Conclusions Reference list
• For this assessment you will use Harvard referencing.

• In text citations: You must include intext citations in the body of your work.

TIP: to avoid plagiarism, you must give credit if you use the work of others

Step 6: Review

• When you have completed your Cyber Security Incident Response Report, review your work carefully for spelling, grammar or other errors.

• Check that citations and references match.

• Read the Marking Rubric again to check that you have met the criteria.

Step 7: Submit Final

List of References

Academic writing and copyright law require that you acknowledge the source when using the ideas of others. In this course, we use the Harvard AGPS Style that requires a list of references (not bibliographies) and in-text citation of sources. Include page numbers in in-text citations for quoted or closely paraphrased material. The case study should not be referenced but the ideas that you used from your prescribed text and readings must be cited in-text and included in the list of references. Only list those sources that you cited in your written work. Make sure that you follow the correct Harvard AGPS method of referencing.