ASSESSMENT 1 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements An Internet start-up company called "NetMovies" who are planning to compete with "Netflix" and "Bigpond Movies" hiring out DVDs and Blu-Rays online, has approached you to assist with determining how they will be affected by privacy legislation. The systems being designed by the company will contain information such as billing, shipping and previous movies that have been hired by customers. NetMovies employ 20 staff, 8 in distribution, 5 in a call centre, 4 in billing and administration and the remaining 3 in management. The only form of privacy policy they have is a hastily written paragraph on their website indicating that "information relating to an account will only be released to the account holder and will not be distributed to any third party or individual". For this Assessment Task you are to create a report for NetMovies containing an overview of legislation that they should be aware of as well as privacy policies and / or procedures they should consider implementing to ensure that the privacy and security of data stored is maintained. You must also review their current policy and identify discrepancies between it and the identified privacy legislation. Once your report is complete submit it to your instructor for assessment This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. ASSESSMENT 2 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements For this assessment task you are to develop an updated privacy policy and procedure for Net Movies new website based on the investigation and report produced in Assessment Task 1. You must also develop two of the procedures identified in Assessment Task 1. You must submit your assessment in the form of a report addressed to the CEO of Net Movies. In your report you must include: • Directions on who the policies and procedures should be distributed to • Guidelines for co-ordination of training for personnel • Guidelines for the review of work practices to ensure correct application of the policy and procedures Once complete submit your report to your client (your assessor) and explain its contents. This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. ASSESSMENT 3 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements For this assessment task you are to develop the following policies (and associated procedures) for Net Movies. • Copyright Policy (to protect the intellectual property of the company) • Company Ethical Policy (to protect the rights of all stakeholders). Your ethical policy must also include a code of ethics that can be implemented into Net Movies You must present your policies and procedures to the CEO of Net Movies (to be played by your assessor), along with a report that provides: • Directions on who the policies and procedures should be distributed to • Guidelines for co-ordination of training for personnel • Guidelines for the review of work practices to ensure correct application of the policy and procedures This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. ASSESSMENT 4 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements You have been asked to assist in setting up a small office IT system for Freedom Franchise that will be used for the following: • 1 manager – Needs the full administration suite • 5 administration staff (need Word, Excel, Outlook and associated support programs (i.e. acrobat PDF reader, etc) • 2 sales staff (mainly on the road) – Require same programs as admin, plus PowerPoint for sales presentations The company will be required to share files and have regular back-ups that can be stored off-site This company is on a tight budget, but want the best possible equipment as possible. You have access to cracked Microsoft Office and Windows 7 Software that you can reproduce as often as you like (because you have the software on disc) You also have a friend that can get "staff discount" from a local PC store, where the price is 20% cheaper than most major retailers. And, as a benefit, your friend gets commission on each product sold. He has suggested you sell the products at full price and split the difference with him. It seems win-win. (to calculate the prices of this equipment, just take 20% off the cheapest system you can find when you research what is available). It is important to note that your friend's company creates "new PC's" by reclaiming old PC's and putting the internal components into new casings. You are to develop a proposal for Freedom Franchise, which includes the type of system you would install, price (including your labour), warranty, support and availability You are to then present your proposal to your assessor (who will act as the client) in a one-on-one meeting and explain you have to offer. Your client is also available at any stage to ask questions for clarification if required This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. ASSESSMENT 5 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements Following from Assessment 3, Net Movies have received a complaint from a client stating they were told by a staff member that if they paid cash, they could have their late fees halved. The staff member denies all knowledge of this, and the Net Movies have noticed they have no documented process for dealing with the issue. You have been asked by the CEO of Net Movies to develop a grievance policy for dealing with policy breaches. You are to develop this policy, along with a sequential procedure that can be followed throughout the organisation. Once developed, you are to present your policy and procedure to the CEO for approval This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. ASSESSMENT 6 – STUDENT INFORMATION This information is to be handed to each student to outline the assessment requirements PART A You are to identify a system and perform a security review. The system you select is your choice but must be approved by your instructor. Some of systems include your workstation or an e-commerce website. Your security review should also cover the privacy and ethical temptation issues covered in your previous assessment. In your review you must: • Conduct a risk analysis on the system, record the outcomes then assess and categorise risks • Evaluate threats to the system and record your findings • Identify and document human interactions with the system, categorise and assess the risks associated with these actions • Determine and plan resources, controls and risk management plans for the identified categories Submit your completed review to your instructor for assessment. This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. PART B You are to design password policies and procedures for workstation logins in an organisation including complexity and ageing. You are to research and develop a security plan identifying how to implement controls to enforce these policies in Microsoft Windows or other operating system. You should also research methods to identify breakdowns and attempted circumventions of these controls and document a procedure for periodically monitoring these attempts. Once complete you are to submit your documentation and provide client focused training on your policies and procedures to your instructor. This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet. PART C You are to develop and document a management review process for reviewing and monitoring risks. Your review process should include reviewing your risk analysis process based on security benchmarks from vendors, security specialists and organisational reviews. Once complete you are to apply your review process to the system you analysed in Assessment task one. You must also investigate and recommend the suitable times at which your system should be analysed re-evaluated for new threats and risks. This assessment must be submitted during your Timetabled class this Term, in the Week number as specified in the Assessment Resource Summary sheet.