COIT20263 Information Security Management (Term 2, 2016) Assessment Item 4—Group Discussion II Due dates: 11:30pm AEST, Friday, Weeks 8, 9 & 10 ASSESSMENT Weighting: 10% 4 Length: No word count limit. Objectives This assessment task should be undertaken in a group of up to 4 members. Distance students are also required to form groups. Each student will analyse the scenario given in Assessment Item 1 and discuss the given issues in relation to the Course Learning Outcome 3 by contributing to the Group Discussion II of Moodle Discussion Forum during weeks 8, 9 and 10. Assessment criteria The students are assessed against their ability to make meaningful contributions to the Group Discussion II of Moodle Discussion Forum in the specified weeks. The marking criteria for Assessment Item 4 are provided on page 3. Students need to familiarise themselves with the marking criteria to ensure that they contribute to this assessment task timely and properly. Assessment Task You are required to analyse the scenario given on page 2 and discuss the following issues in the specified weeks in relation to the Course Learning Outcome 3. a) What would be the effect of truckies and delivery people on the information security risk management of the society? (Due in week 8). b) What would be the effect of the farmers on the information security risk management of the society? (Due in week 9). c) When managing the information security risks of the society, would it need to consider the information security risk management methods and blueprints of financial institutions as well? (Due in week 10). The Group Discussion II Forum in Moodle should be used for weekly discussions. Submission Each student should copy/paste their weekly discussions to a Word document and upload it to Moodle in Week 10.   The Scenario for Information Security Management Assessment Tasks Farmers for Farmers (3F) is a cooperative society of crop farmers in Queensland founded one year ago. Established to increase the yield of its member farmers and reduce the wastage due to rotting of crops, the society sells the crops to the customers at a lower price than that of the few giant supermarket chains in the state. 3F competes with these supermarket chains by directly supplying the produce from the farmers to the consumers without an intermediary. To this end, 3F has its own trucks, five distribution centres in the state and six distribution vehicles at each distribution centre. 3F operates from a small office in Rockhampton and the customers can place their orders using the web interface of 3F or over the phone. The orders are processed using a proprietary software algorithm of 3F. By using this software, 3F not only collect the optimum quantities of crops from the farmers and deliver them on time to the distribution centres, but also deliver the order to the customers in a minimum time. This whole process is automated with the help of on-board computers on the trucks as well as on the distribution vehicles connected to the office of 3F and the farmers. This software algorithm is also used by the farmers to order and add fertilizer to their farmlands, to water the plants, spray pesticides and collect the yield in an optimum fashion while saving energy costs, resources and money. For this purpose, the algorithm collects real-time information from the farms, such as air and soil temperature, humidity, soil moisture content, information about pests, rain fall figures and the intensity of sunlight, without human intervention. The farmers also connect to the Internet via the network of 3F and post questions to the online forums. 3F also includes an online banking society that provides most of the banking facilities of other banks to its member farmers. 3F needs the guarantee that their proprietary algorithm, and various data and information in their information system are secured. After the success in Queensland, 3F expanded its services this year to the New South Wales farmers and customers as well. As the society was established last year, the information security policies have not yet been developed. The society is now in the process of developing a comprehensive set of information security policies for its information system. Note: This scenario was created by Dr Rohan de Silva on 7th June 2016 and without written permission from CQUniversity, Australia no part of this scenario should be reproduced by any individual or an organisation.   Assessment Item 4 –Marking Sheet Discussion Week Mark Allocation Criteria Max. Mark Allocated Mark Earned 3 2 1 0 Week8 Very relevant discussion. Relevant but could be improved. Not relevant discussion. Not attempted. 3 Week9 Very relevant discussion. Relevant but could be improved. Not relevant discussion. Not attempted. 3 4 2.5 1 0 Week10 Very relevant discussion. Relevant but could be improved. Not relevant discussion. Not attempted. 4 Late Submission penalty Plagiarism penalty Total 10