Reference no: EM133073139 , Length: 5 pages

SIT763 Cyber Security Management - Deakin University

Task 1: Compliance to Australian Notifiable Data Breaches (NDB) scheme

Using ‘Part 4' of the document from the link below, answer the following questions that Transcon would have to comply with to meet the Australian Government Notifiable Data Breaches Scheme (NDB) for a ransomware attack classified as a eligible data breach. (500 words)

1. What is it about the incident that would classify it as an eligible data breach?

2. How is an assessment to be performed following an eligible data breach? Include the timeframe for completing the assessment as part of your answer.

3. To whom and how will the notification of the data breach be communicated?

Task 2: Incident Management and Response Diagram

Using the 4 major steps of the NIST Incident Response lifecycle namely: 1. Preparation, 2. Detection and Analysis, 3. Containment, Eradication, and Recovery and 4. Post-Incident Activity depicted on page 13 of the following document; create a diagram that provides Transcon with an incident response plan for a ransomware attack.

Task 3: Ransomware Attack Procedure

Using the Transcon SAD identify against what asset and explain how a ransomware attack could occur. Using your diagram from task 2, provide Transcon with a written procedure to follow for the identified ransomware attack.

Attachment:- Assessment Task Template.rar