ITD240 Cyber Security
To view more information for this unit, select Unit Outline from the list below. Please note the teaching period for which the Unit Outline is relevant.
| Unit code: | ITD240 |
|---|---|
| Equivalent(s): | IFB240 |
| Credit points: | 12 |
| Timetable | Details in HiQ, if available |
| Availabilities |
|
Unit Outline: College 1 2027, Kelvin Grove, Internal
| Unit code: | ITD240 |
|---|---|
| Credit points: | 12 |
| Equivalent: | IFB240 |
| Coordinator: | Fariba Shadabi | fariba.shadabi@qut.edu.au |
Overview
Cyber security breaches, from database hacking to malware campaigns, are increasing. The interconnectedness of information systems means the actions of individuals impact many others. This unit is important in developing an understanding of the challenges involved in protecting information assets. Fundamental information security concepts are introduced in a range of areas which include security goals, threats to information and vulnerabilities that could be exploited, technical and non-technical measures to provide security for information and cyber security management standards and best practice.
Learning Outcomes
On successful completion of this unit you will be able to:
- Define major information security goals and identify those which relate to the strategic goals of an organisation.
- Conduct a risk analysis of the security of information assets in a range of practical situations and determine the ethical and information security implications.
- Apply appropriate industry standard methods to IT Systems for addressing information security and cyber risks.
- Collaborate with others in a team environment to write a risk report for a client, using appropriate and professional language to communicate with relevant stakeholders.
- Explain the information security management standards and provide clear written recommendations for organisations to safeguard stakeholder privacy and other legal rights.
Content
This unit introduces fundamental information security concepts (aspects of the protection of information assets) and explains why you must understand information security principles and how they can be applied to digital information assets. Information security goals including confidentiality, integrity, availability, authentication and non-repudiation are defined. Risk factors impacting on the security of information assets are identified and discussed. Methods of protecting information are outlined, including both technical and human-centered approaches, in areas such as access control, cryptography (symmetric and asymmetric) and network security. Security management standards are also reviewed. Discussions of cyber security issues emphasize the high standard of ethical conduct expected of those working in areas which affect information security.
Real world cases of threats, vulnerabilities and security incidents will be explored along with the consequences and impact from the perspectives of multiple stakeholders. The role of people, processes and technology will also be considered as vulnerabilities in any of these aspects can be exploited to cause harm. Cyber security is a team sport, and increased diversity in a team provides the opportunity to examine a situation from multiple perspectives, enabling a stronger organisational response.
Learning Approaches
This unit takes a blended approach to learning and teaching. You will be provided with both eContent and timetabled classes such as lectures and tutorials. eContent will be provided on your Canvas site for you to engage with on a weekly basis before your classes. It could include videos, readings and/or other activities designed to enhance your learning experience. During the timetabled classes, the unit coordinator and/or your tutor will further explain content and you will be provided with opportunities to explore this content in a collaborative learning environment. After your weekly classes, you should continue to engage with unit resources to ensure you consolidate your understanding of unit content. Teaching team members will also be available for one-on-one consultations to assist you with your learning journey.
Feedback on Learning and Assessment
Throughout semester feedback will be provided in various forms which may include:
• Informal: worked examples, such as verbal feedback in class, personal consultation
• Formal: in writing, such as checklists, rubrics, written commentary
• Direct: to individual students, either in written form or in consultation
• Indirect: to the whole class
Assessment
Overview
This unit introduces foundational concepts and principles, so the assessment tasks are largely based around knowledge and skills acquired throughout the semester and their application to real-world examples. There are three summative assessments to be completed: 1) a Teamwork Reflection, 2) a comprehensive Risk Report and 3) a Final Examination.
Unit Grading Scheme
7- point scale
Assessment Tasks
Assessment: Teamwork reflection
This assessment task is designed to assist your active participation as a team member in order to enable effective teamwork in Assessment Task 2. There are 2 parts to this task:
Part A involves a self evaluation of individual strengths and weaknesses to contribute to effective teamwork (5%)
Part B requires you to write a short reflection on your experience in completing Assessment Task 2 with your team, and the effectiveness of your contribution to the team (5%)
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
Assessment: Risk report
This assignment comprises a series of practical tasks, each requiring you to work as a team to identify security vulnerabilities, select and apply appropriate control measures to mitigate the vulnerabilities, and demonstrate the use of industry standard tools and processes appropriate for the context for improving cyber security.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
The ethical and responsible use of generative artificial intelligence (GenAI) tools is authorised in this assessment. See the relevant assessment details in Canvas for specific guidelines.
Assessment: Examination
This examination will assess your knowledge and understanding of concepts and principles presented throughout the semester.
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
Assessment: Online Ethics Module (Part 2)
In this self-contained online Ethics Module (Part 2) you will learn how to identify challenges when faced with ethical decision-making and how to apply the principles of ethical behaviour. You will then need to pass an online quiz to test your knowledge of the topics covered. You must pass the quiz in order to pass this unit, however, you may attempt the quiz an unlimited number of times until you pass.
This Ethics Module (Part 2) has as a prerequisite Ethics Module (Part 1) which you will normally have completed as part of an earlier unit ITD105. However, if you haven't already completed Part 1 then you will need to complete this first before completing Part 2.
Threshold Assessment:
IT professionals are bound by a code of ethics and professional conduct. Knowledge of these codes is therefore essential for all IT students. You must pass the Ethics Module (Part 2) in order to pass this unit, i.e. regardless of how well you do in the other assessment items, you cannot pass this unit if you fail this assessment item. You may however attempt this assessment items an unlimited number of times until you pass.
Academic Integrity
Academic integrity is a commitment to undertaking academic work and assessment in a manner that is ethical, fair, honest, respectful and accountable.
The Academic Integrity Policy sets out the range of conduct that can be a failure to maintain the standards of academic integrity. This includes, cheating in exams, plagiarism, self-plagiarism, collusion and contract cheating. It also includes providing fraudulent or altered documentation in support of an academic concession application, for example an assignment extension or a deferred exam.
You are encouraged to make use of QUT’s learning support services, resources and tools to assure the academic integrity of your assessment. This includes the use of text matching software that may be available to assist with self-assessing your academic integrity as part of the assessment submission process.
Breaching QUT’s Academic Integrity Policy or engaging in conduct that may defeat or compromise the purpose of assessment can lead to a finding of student misconduct (Code of Conduct – Student) and result in the imposition of penalties under the Management of Student Misconduct Policy, ranging from a grade reduction to exclusion from QUT.
Resources
There is no required text for this unit. There are many useful online sources of material on information security. However, if you want a hardcopy reference book, consider the following recommended text.
Resource Materials
Recommended text(s)
Whitman, M.E, & Mattord, H. (2017). Principles of Information Security (6th edition). Cengage.
Risk Assessment Statement
There are no unusual health or safety risks associated with this unit.
Course Learning Outcomes
This unit is designed to support your development of the following course/study area learning outcomes.IT10 Diploma in Information Technology
- Demonstrate foundational IT theory and skills, including the ethical and responsible use of GenAI, for your practice as a future IT professional.
Relates to: ULO1, Teamwork reflection, Risk report, Examination - Critically analyse and conceptualise a range of predictable IT challenges and opportunities using problem solving skills to generate, evaluate and justify recommended solutions.
Relates to: Risk report - Demonstrate the ability to work independently and collaboratively within teams employing IT project management methodologies to effectively plan and manage time, resources and risk
Relates to: Risk report - Communicate professionally and effectively in written, verbal and visual formats to a range of audiences, considering the audience and explaining complex ideas in a simple and understandable manner in a range of IT-related contexts.
Relates to: Risk report, Online Ethics Module (Part 2) - Apply self-reflective, ethical and inclusive approaches to a range of issues impacting the development and use of IT, including how they relate to Aboriginal and Torres Strait Islander peoples, people with a disability and other vulnerable members of society.
Relates to: ULO4, Teamwork reflection
Unit Outline: College 2 2027, Kelvin Grove, Internal
| Unit code: | ITD240 |
|---|---|
| Credit points: | 12 |
| Equivalent: | IFB240 |
Overview
Cyber security breaches, from database hacking to malware campaigns, are increasing. The interconnectedness of information systems means the actions of individuals impact many others. This unit is important in developing an understanding of the challenges involved in protecting information assets. Fundamental information security concepts are introduced in a range of areas which include security goals, threats to information and vulnerabilities that could be exploited, technical and non-technical measures to provide security for information and cyber security management standards and best practice.
Learning Outcomes
On successful completion of this unit you will be able to:
- Define major information security goals and identify those which relate to the strategic goals of an organisation.
- Conduct a risk analysis of the security of information assets in a range of practical situations and determine the ethical and information security implications.
- Apply appropriate industry standard methods to IT Systems for addressing information security and cyber risks.
- Collaborate with others in a team environment to write a risk report for a client, using appropriate and professional language to communicate with relevant stakeholders.
- Explain the information security management standards and provide clear written recommendations for organisations to safeguard stakeholder privacy and other legal rights.
Content
This unit introduces fundamental information security concepts (aspects of the protection of information assets) and explains why you must understand information security principles and how they can be applied to digital information assets. Information security goals including confidentiality, integrity, availability, authentication and non-repudiation are defined. Risk factors impacting on the security of information assets are identified and discussed. Methods of protecting information are outlined, including both technical and human-centered approaches, in areas such as access control, cryptography (symmetric and asymmetric) and network security. Security management standards are also reviewed. Discussions of cyber security issues emphasize the high standard of ethical conduct expected of those working in areas which affect information security.
Real world cases of threats, vulnerabilities and security incidents will be explored along with the consequences and impact from the perspectives of multiple stakeholders. The role of people, processes and technology will also be considered as vulnerabilities in any of these aspects can be exploited to cause harm. Cyber security is a team sport, and increased diversity in a team provides the opportunity to examine a situation from multiple perspectives, enabling a stronger organisational response.
Learning Approaches
This unit takes a blended approach to learning and teaching. You will be provided with both eContent and timetabled classes such as lectures and tutorials. eContent will be provided on your Canvas site for you to engage with on a weekly basis before your classes. It could include videos, readings and/or other activities designed to enhance your learning experience. During the timetabled classes, the unit coordinator and/or your tutor will further explain content and you will be provided with opportunities to explore this content in a collaborative learning environment. After your weekly classes, you should continue to engage with unit resources to ensure you consolidate your understanding of unit content. Teaching team members will also be available for one-on-one consultations to assist you with your learning journey.
Feedback on Learning and Assessment
Throughout semester feedback will be provided in various forms which may include:
• Informal: worked examples, such as verbal feedback in class, personal consultation
• Formal: in writing, such as checklists, rubrics, written commentary
• Direct: to individual students, either in written form or in consultation
• Indirect: to the whole class
Assessment
Overview
This unit introduces foundational concepts and principles, so the assessment tasks are largely based around knowledge and skills acquired throughout the semester and their application to real-world examples. There are three summative assessments to be completed: 1) a Teamwork Reflection, 2) a comprehensive Risk Report and 3) a Final Examination.
Unit Grading Scheme
7- point scale
Assessment Tasks
Assessment: Teamwork reflection
This assessment task is designed to assist your active participation as a team member in order to enable effective teamwork in Assessment Task 2. There are 2 parts to this task:
Part A involves a self evaluation of individual strengths and weaknesses to contribute to effective teamwork (5%)
Part B requires you to write a short reflection on your experience in completing Assessment Task 2 with your team, and the effectiveness of your contribution to the team (5%)
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
Assessment: Risk report
This assignment comprises a series of practical tasks, each requiring you to work as a team to identify security vulnerabilities, select and apply appropriate control measures to mitigate the vulnerabilities, and demonstrate the use of industry standard tools and processes appropriate for the context for improving cyber security.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
The ethical and responsible use of generative artificial intelligence (GenAI) tools is authorised in this assessment. See the relevant assessment details in Canvas for specific guidelines.
Assessment: Examination
This examination will assess your knowledge and understanding of concepts and principles presented throughout the semester.
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
Assessment: Online Ethics Module (Part 2)
In this self-contained online Ethics Module (Part 2) you will learn how to identify challenges when faced with ethical decision-making and how to apply the principles of ethical behaviour. You will then need to pass an online quiz to test your knowledge of the topics covered. You must pass the quiz in order to pass this unit, however, you may attempt the quiz an unlimited number of times until you pass.
This Ethics Module (Part 2) has as a prerequisite Ethics Module (Part 1) which you will normally have completed as part of an earlier unit ITD105. However, if you haven't already completed Part 1 then you will need to complete this first before completing Part 2.
Threshold Assessment:
IT professionals are bound by a code of ethics and professional conduct. Knowledge of these codes is therefore essential for all IT students. You must pass the Ethics Module (Part 2) in order to pass this unit, i.e. regardless of how well you do in the other assessment items, you cannot pass this unit if you fail this assessment item. You may however attempt this assessment items an unlimited number of times until you pass.
Academic Integrity
Academic integrity is a commitment to undertaking academic work and assessment in a manner that is ethical, fair, honest, respectful and accountable.
The Academic Integrity Policy sets out the range of conduct that can be a failure to maintain the standards of academic integrity. This includes, cheating in exams, plagiarism, self-plagiarism, collusion and contract cheating. It also includes providing fraudulent or altered documentation in support of an academic concession application, for example an assignment extension or a deferred exam.
You are encouraged to make use of QUT’s learning support services, resources and tools to assure the academic integrity of your assessment. This includes the use of text matching software that may be available to assist with self-assessing your academic integrity as part of the assessment submission process.
Breaching QUT’s Academic Integrity Policy or engaging in conduct that may defeat or compromise the purpose of assessment can lead to a finding of student misconduct (Code of Conduct – Student) and result in the imposition of penalties under the Management of Student Misconduct Policy, ranging from a grade reduction to exclusion from QUT.
Resources
There is no required text for this unit. There are many useful online sources of material on information security. However, if you want a hardcopy reference book, consider the following recommended text.
Resource Materials
Recommended text(s)
Whitman, M.E, & Mattord, H. (2017). Principles of Information Security (6th edition). Cengage.
Risk Assessment Statement
There are no unusual health or safety risks associated with this unit.
Course Learning Outcomes
This unit is designed to support your development of the following course/study area learning outcomes.IT10 Diploma in Information Technology
- Demonstrate foundational IT theory and skills, including the ethical and responsible use of GenAI, for your practice as a future IT professional.
Relates to: ULO1, Teamwork reflection, Risk report, Examination - Critically analyse and conceptualise a range of predictable IT challenges and opportunities using problem solving skills to generate, evaluate and justify recommended solutions.
Relates to: Risk report - Demonstrate the ability to work independently and collaboratively within teams employing IT project management methodologies to effectively plan and manage time, resources and risk
Relates to: Risk report - Communicate professionally and effectively in written, verbal and visual formats to a range of audiences, considering the audience and explaining complex ideas in a simple and understandable manner in a range of IT-related contexts.
Relates to: Risk report, Online Ethics Module (Part 2) - Apply self-reflective, ethical and inclusive approaches to a range of issues impacting the development and use of IT, including how they relate to Aboriginal and Torres Strait Islander peoples, people with a disability and other vulnerable members of society.
Relates to: ULO4, Teamwork reflection
Unit Outline: College Summer 2027, Kelvin Grove, Internal
| Unit code: | ITD240 |
|---|---|
| Credit points: | 12 |
| Equivalent: | IFB240 |
Overview
Cyber security breaches, from database hacking to malware campaigns, are increasing. The interconnectedness of information systems means the actions of individuals impact many others. This unit is important in developing an understanding of the challenges involved in protecting information assets. Fundamental information security concepts are introduced in a range of areas which include security goals, threats to information and vulnerabilities that could be exploited, technical and non-technical measures to provide security for information and cyber security management standards and best practice.
Learning Outcomes
On successful completion of this unit you will be able to:
- Define major information security goals and identify those which relate to the strategic goals of an organisation.
- Conduct a risk analysis of the security of information assets in a range of practical situations and determine the ethical and information security implications.
- Apply appropriate industry standard methods to IT Systems for addressing information security and cyber risks.
- Collaborate with others in a team environment to write a risk report for a client, using appropriate and professional language to communicate with relevant stakeholders.
- Explain the information security management standards and provide clear written recommendations for organisations to safeguard stakeholder privacy and other legal rights.
Content
This unit introduces fundamental information security concepts (aspects of the protection of information assets) and explains why you must understand information security principles and how they can be applied to digital information assets. Information security goals including confidentiality, integrity, availability, authentication and non-repudiation are defined. Risk factors impacting on the security of information assets are identified and discussed. Methods of protecting information are outlined, including both technical and human-centered approaches, in areas such as access control, cryptography (symmetric and asymmetric) and network security. Security management standards are also reviewed. Discussions of cyber security issues emphasize the high standard of ethical conduct expected of those working in areas which affect information security.
Real world cases of threats, vulnerabilities and security incidents will be explored along with the consequences and impact from the perspectives of multiple stakeholders. The role of people, processes and technology will also be considered as vulnerabilities in any of these aspects can be exploited to cause harm. Cyber security is a team sport, and increased diversity in a team provides the opportunity to examine a situation from multiple perspectives, enabling a stronger organisational response.
Learning Approaches
This unit takes a blended approach to learning and teaching. You will be provided with both eContent and timetabled classes such as lectures and tutorials. eContent will be provided on your Canvas site for you to engage with on a weekly basis before your classes. It could include videos, readings and/or other activities designed to enhance your learning experience. During the timetabled classes, the unit coordinator and/or your tutor will further explain content and you will be provided with opportunities to explore this content in a collaborative learning environment. After your weekly classes, you should continue to engage with unit resources to ensure you consolidate your understanding of unit content. Teaching team members will also be available for one-on-one consultations to assist you with your learning journey.
Feedback on Learning and Assessment
Throughout semester feedback will be provided in various forms which may include:
• Informal: worked examples, such as verbal feedback in class, personal consultation
• Formal: in writing, such as checklists, rubrics, written commentary
• Direct: to individual students, either in written form or in consultation
• Indirect: to the whole class
Assessment
Overview
This unit introduces foundational concepts and principles, so the assessment tasks are largely based around knowledge and skills acquired throughout the semester and their application to real-world examples. There are three summative assessments to be completed: 1) a Teamwork Reflection, 2) a comprehensive Risk Report and 3) a Final Examination.
Unit Grading Scheme
7- point scale
Assessment Tasks
Assessment: Teamwork reflection
This assessment task is designed to assist your active participation as a team member in order to enable effective teamwork in Assessment Task 2. There are 2 parts to this task:
- Part A involves a self evaluation of individual strengths and weaknesses to contribute to effective teamwork (5%)
- Part B requires you to write a short refection on your experience in completing Assessment Task 2 with your team, and the effectiveness of your contribution to the team (5%)
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
Assessment: Risk report
This assignment comprises a series of practical tasks, each requiring you to work as a team to identify security vulnerabilities, select and apply appropriate control measures to mitigate the vulnerabilities, and demonstrate the use of industry standard tools and processes appropriate for the context for improving cyber security.
This assignment is eligible for the 48-hour late submission period and assignment extensions.
The ethical and responsible use of generative artificial intelligence (GenAI) tools is authorised in this assessment. See the relevant assessment details in Canvas for specific guidelines.
Assessment: Examination
This examination will assess your knowledge and understanding of concepts and principles presented throughout the semester.
The use of generative artificial intelligence (GenAI) tools is prohibited during this assessment.
Assessment: Online Ethics Module (Part 2)
In this self-contained online Ethics Module (Part 2) you will learn how to identify challenges when faced with ethical decision-making and how to apply the principles of ethical behaviour. You will then need to pass an online quiz to test your knowledge of the topics covered. You must pass the quiz in order to pass this unit, however, you may attempt the quiz an unlimited number of times until you pass.
This Ethics Module (Part 2) has as a prerequisite Ethics Module (Part 1) which you will normally have completed as part of an earlier unit ITD105. However, if you haven't already completed Part 1 then you will need to complete this first before completing Part 2.
Threshold Assessment:
IT professionals are bound by a code of ethics and professional conduct. Knowledge of these codes is therefore essential for all IT students. You must pass the Ethics Module (Part 2) in order to pass this unit, i.e. regardless of how well you do in the other assessment items, you cannot pass this unit if you fail this assessment item. You may however attempt this assessment items an unlimited number of times until you pass.
Academic Integrity
Academic integrity is a commitment to undertaking academic work and assessment in a manner that is ethical, fair, honest, respectful and accountable.
The Academic Integrity Policy sets out the range of conduct that can be a failure to maintain the standards of academic integrity. This includes, cheating in exams, plagiarism, self-plagiarism, collusion and contract cheating. It also includes providing fraudulent or altered documentation in support of an academic concession application, for example an assignment extension or a deferred exam.
You are encouraged to make use of QUT’s learning support services, resources and tools to assure the academic integrity of your assessment. This includes the use of text matching software that may be available to assist with self-assessing your academic integrity as part of the assessment submission process.
Breaching QUT’s Academic Integrity Policy or engaging in conduct that may defeat or compromise the purpose of assessment can lead to a finding of student misconduct (Code of Conduct – Student) and result in the imposition of penalties under the Management of Student Misconduct Policy, ranging from a grade reduction to exclusion from QUT.
Resources
There is no required text for this unit. There are many useful online sources of material on information security. However, if you want a hardcopy reference book, consider the following recommended text.
Resource Materials
Recommended text(s)
Whitman, M.E, & Mattord, H. (2017). Principles of Information Security (6th edition). Cengage.
Risk Assessment Statement
There are no unusual health or safety risks associated with this unit.
Course Learning Outcomes
This unit is designed to support your development of the following course/study area learning outcomes.IT10 Diploma in Information Technology
- Demonstrate foundational IT theory and skills, including the ethical and responsible use of GenAI, for your practice as a future IT professional.
Relates to: ULO1, Teamwork reflection, Risk report, Examination - Critically analyse and conceptualise a range of predictable IT challenges and opportunities using problem solving skills to generate, evaluate and justify recommended solutions.
Relates to: Risk report - Demonstrate the ability to work independently and collaboratively within teams employing IT project management methodologies to effectively plan and manage time, resources and risk
Relates to: Risk report - Communicate professionally and effectively in written, verbal and visual formats to a range of audiences, considering the audience and explaining complex ideas in a simple and understandable manner in a range of IT-related contexts.
Relates to: Risk report, Online Ethics Module (Part 2) - Apply self-reflective, ethical and inclusive approaches to a range of issues impacting the development and use of IT, including how they relate to Aboriginal and Torres Strait Islander peoples, people with a disability and other vulnerable members of society.
Relates to: ULO4, Teamwork reflection