Assignment Task

You have recently joined a training organisation as a cybersecurity officer. The training organisation use several delivery modes such as classroom, blended and distance modes to provide quality education and training to its clients.  

The training organisation has experienced a number of cyber threats recently including but not limited to:

• A ransomware attack 
• A number of phishing activities 
• Data leakage on a number of occasions 
• Website hacking (two times in the last month) 

You are required to develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices, support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters and review cyber security awareness in the work area.  

Problem: The organisation currently does not have the expertise, knowledge, or skills to look into cyber security threats, they will require your services to make sure the organisation is secure and safe from the cyber threats.  

Other roles and responsibilities

Organisational representative/Information security manager: This role will be played by your trainer/assessor. The purpose of this role is to ensure:

• developing and managing Information Systems cybersecurity, including disaster recovery, database protection and software development. 
• Manages IS security analysts to ensure that all applications are functional and secure.

Workplace colleagues (two): The role can be allocated to RTO representatives assigned by your trainer/assessor or any two students. If the students are selected, the demonstration of activities will occur in small groups in the absence of other students not participating at any given time. All students must participate and demonstrate their skills and knowledge to complete each of the assessment activities. The students will be assessed individually at all times based on their performance in the assessment activities.

Activity 1: Develop cyber security awareness in work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices    

In this assessment activity, you are required to develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices.

To complete this assessment task, you must participate in a meeting to consult with stakeholders to understand the assessment requirements and collect all the necessary information to complete your assessment activities.

Meeting objectives:

• Understand the assessment task requirements
• Understand your role and responsibilities 
• Understand the role and responsibilities of other team members
• Understand the organisational requirements and guidelines in which meeting should occur
• Understand the topics to be discussed
• Understand any other requirements and guidelines applicable to complete the assessment task
• The meeting should cover all aspects of performance criteria to complete the assessment task successfully

Before the meeting, you are required to prepare a meeting agenda using the template provided.

When conducting the meeting, you are required to:

• Greet the team members. 
• Discuss the following:
• Compliance of diversity policy with the legislative requirements 
• Application of diversity policy.
• Assessment of the currency of diversity policy
• Assessment of the efficacy of diversity policy
• Suggested improvements
• Ensure the understanding of the team members. 
• Gather feedback from the team members on the diversity policy
• Use listening and questioning to elicit the views of others and to clarify or confirm understanding 
• Discuss the roles and responsibilities of the team members.
• Discuss the implementation plan for the revised diversity policy. Discuss the following: 
• Key result area 
• Objectives 
• Actions/training needs
• Responsibility 
• Timeframe 
• Success measures 
• Gain approval for the implementation plan 

The team member will:

• Clarify their doubts of the team members
• Provide feedback on the improvements required

After the meeting, you are then required to:

• Prepare the meeting minutes template.
• Prepare a revised diversity policy using the template provided.
• Prepare an implementation plan using the template provided.

Activity 2: Support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters    

In this assessment activity, you are required to arrange training to be provided to colleagues to support practice and awareness in relation to cybersecurity matters. The training will be required for 15 to 30 minutes and must include the following topics:

• The organisation 
• Review cyber security practices according to organisational policies and procedures
• Arrange training and information updates as required, and maintain related records
• Cybersecurity training requirements and purpose 
• Phishing attacks.
• Removable media.
• Passwords and Authentication.
• Physical security.
• Mobile Device Security.
• Working Remotely.
• Public Wi-Fi.
• Cloud Security
• Present insights from review and training to required personnel, and potential related impacts on the workplace