Assignment Task
You have recently joined a training organisation as a cybersecurity officer. The training organisation use several delivery modes such as classroom, blended and distance modes to provide quality education and training to its clients.
The training organisation has experienced a number of cyber threats recently including but not limited to:
A ransomware attack
A number of phishing activities
Data leakage on a number of occasions
Website hacking (two times in the last month)
You are required to develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices, support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters and review cyber security awareness in the work area.
Problem: The organisation currently does not have the expertise, knowledge, or skills to look into cyber security threats, they will require your services to make sure the organisation is secure and safe from the cyber threats.
Other roles and responsibilities
Organisational representative/Information security manager: This role will be played by your trainer/assessor. The purpose of this role is to ensure:
developing and managing Information Systems cybersecurity, including disaster recovery, database protection and software development.
Manages IS security analysts to ensure that all applications are functional and secure.
Workplace colleagues (two): The role can be allocated to RTO representatives assigned by your trainer/assessor or any two students. If the students are selected, the demonstration of activities will occur in small groups in the absence of other students not participating at any given time. All students must participate and demonstrate their skills and knowledge to complete each of the assessment activities. The students will be assessed individually at all times based on their performance in the assessment activities.
Activity 1: Develop cyber security awareness in work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices
In this assessment activity, you are required to develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices.
To complete this assessment task, you must participate in a meeting to consult with stakeholders to understand the assessment requirements and collect all the necessary information to complete your assessment activities.
Meeting objectives:
Understand the assessment task requirements
Understand your role and responsibilities
Understand the role and responsibilities of other team members
Understand the organisational requirements and guidelines in which meeting should occur
Understand the topics to be discussed
Understand any other requirements and guidelines applicable to complete the assessment task
The meeting should cover all aspects of performance criteria to complete the assessment task successfully
Before the meeting, you are required to prepare a meeting agenda using the template provided.
When conducting the meeting, you are required to:
Greet the team members.
Discuss the following:
Compliance of diversity policy with the legislative requirements
Application of diversity policy.
Assessment of the currency of diversity policy
Assessment of the efficacy of diversity policy
Suggested improvements
Ensure the understanding of the team members.
Gather feedback from the team members on the diversity policy
Use listening and questioning to elicit the views of others and to clarify or confirm understanding
Discuss the roles and responsibilities of the team members.
Discuss the implementation plan for the revised diversity policy. Discuss the following:
Key result area
Objectives
Actions/training needs
Responsibility
Timeframe
Success measures
Gain approval for the implementation plan
The team member will:
Clarify their doubts of the team members
Provide feedback on the improvements required
After the meeting, you are then required to:
Prepare the meeting minutes template.
Prepare a revised diversity policy using the template provided.
Prepare an implementation plan using the template provided.
Activity 2: Support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters
In this assessment activity, you are required to arrange training to be provided to colleagues to support practice and awareness in relation to cybersecurity matters. The training will be required for 15 to 30 minutes and must include the following topics:
The organisation
Review cyber security practices according to organisational policies and procedures
Arrange training and information updates as required, and maintain related records
Cybersecurity training requirements and purpose
Phishing attacks.
Removable media.
Passwords and Authentication.
Physical security.
Mobile Device Security.
Working Remotely.
Public Wi-Fi.
Cloud Security
Present insights from review and training to required personnel, and potential related impacts on the workplace
