BSBXCS402 - Student Assessment Pack(1)

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web: Assessment Cover Sheet Please complete cover sheet clearly and accurately for assessment tasks and other types of evidence you submit for your course. All student assessment tasks submissions including any associated checklists where applicable, are to be attached to this cover sheet. Student Use Student ID No NTCA230483 Student Name Mandeep Kaur Unit Code BSBXCS402 Unit Title Promote workplace cyber security awareness and best practices Assessment No. 1 Assessment Method Written Assessment  Initial Submission  Re-Submission Student Declaration I declare that:  These tasks are my own work.  None of this work has been completed by any other person  These tasks are not plagiarised or colluded with any other student/s.  I have correctly referenced all resources and reference texts throughout these assessment tasks.  I have read and understood NTCA’s policy on Plagiarism, cheating and collusion and understand that if I am found to be in breach of this policy, disciplinary action may be taken against me by NTCA.  I have a copy of my assessment work with me, which I can produce if the original is lost. Student Signature: Mandeep Kaur Submission Date: Assessor Use Only Outcome Satisfactory / Not Satisfactory Assessor Feedback: Assessor Name: Signature: Date: Student Submission Receipt: Your submission has been received. Please keep a copy of this record. Student ID & Name : ……………………………….…………………….….. Submission Date: …………………..……………………………. Unit Code : ………………………………..……………… Assessment No & Method: ……………………………………..….……..………….  Initial Submission  Re-Submission Received By (Name): …………………………………….…. Signature: …………………..……….. Date: …………………..……………….. The results will be updated within twenty-one (21) days from your final submission . Please check your student portal regularly to make sure that your results are updated. If there are any discrepancies, please discuss with the Trainer/Student Support Officer. Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web: Ans. Organizations like the Australian Cyber Security Centre (ACSC) work to protect national security by countering cyber threats. 3.2. What is the importance of preparing and publishing a threat report on an ongoing basis? Answer using 30- 60 words. Ans. Regular threat reports help in staying updated on emerging threats, facilitating proactive defence strategies. Q4: Answer the following questions: 4.1. How can cyber security be instilled in workplace culture? Answer using 20-40 words. Ans. Through regular training, clear policies, and promoting a security-first mindset among employees. 4.2. Identify five (5) risks associated with workplace cyber security awareness and best practices. Ans.  Phishing attacks.  Data breaches.  Insider threats.  Inadequate password practices.  Lack of employee awareness. Q5: Answer the following questions: 5.1. How should you promote cyber security in the workplace? Discuss the strategies and techniques to promote cyber security in the workplace using 30-60 words. Ans. Use regular training, simulations, policy enforcement, and awareness campaigns to foster a strong security culture. 5.2. What aspects should be considered when promoting cyber security at a workplace? Identify five (5) aspects. Ans.  Regular training and education.  Clear security policies.  Employee engagement.  Regular updates and reminders.  Response plan for incidents. Q6: Answer the following questions: 6.1. How do you implement a workplace cyber security awareness program? Explain using 30-60 words. Ans. Incorporate regular training, simulated cyber-attacks, policy updates, and employee feedback mechanisms. 6.2. What is the purpose of cyber security awareness training using simulated activities? Explain using 30-60 words. Ans. They provide practical experience, test employee readiness, and help identify areas for improvement in cyber security practices. Assessor Checklist: Assessment Task 1 (Written Assessment) Questions Satisfactory Q1.  Yes  No Q2.  Yes  No Q3.  Yes  No Q4.  Yes  No Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web: Assessment Task 2 - Project Task instructions  This is the second (2) assessment task you must successfully complete to be deemed competent in this unit of competency.  This assessment task requires you to complete a project.  You are required to promote cyber security in a work area in this assessment task.  You will receive your feedback within two (2) weeks, and you will be notified by your trainer/assessor when your results are available.  You must attempt all activities of the project for your trainer/assessor to assess your competence in this assessment task. Project This assessment task requires you to demonstrate the skills and knowledge to lead the identification, management and implementation of specific industry technologies to meet identified industry standards. You are required to complete the following assessment activities in this assessment task: 1. Develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices 2. Support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters 3. Review cyber security awareness in the work area Scenario You have recently joined a training organisation as a cybersecurity officer. The training organisation use several delivery modes such as classroom, blended and distance modes to provide quality education and training to its clients. The training organisation has experienced a number of cyber threats recently including but not limited to:  A ransomware attack  A number of phishing activities  Data leakage on a number of occasions  Website hacking (two times in the last month) You are required to develop cyber security awareness in the work area by developing one set of policies and procedures for a work area that promote cyber security awareness and practices, support effective cyber security practices in the work area by arranging training or updates to be provided to colleagues that support practice or awareness in relation to two different cyber security matters and review cyber security awareness in the work area. Problem: The organisation currently does not have the expertise, knowledge, or skills to look into cyber security threats, they will require your services to make sure the organisation is secure and safe from the cyber threats. Other roles and responsibilities Organisational representative/Information security manager: This role will be played by your trainer/assessor. The purpose of this role is to ensure:  developing and managing Information Systems cybersecurity, including disaster recovery, database protection and software development.  Manages IS security analysts to ensure that all applications are functional and secure. Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web: No. Points Discussed Actions Suggested Target Date 1 Welcome and Introduction Greet team members and outline meeting objectives 01 Sep 2023 2 Compliance with Legislative Requirements Review current policy compliance 14 Sep 2023 3 Application of Diversity Policy Assess current application and efficacy 14 Sep 2023 Signature of attendee 1: Signature of attendee 2: Mandeep Kaur Avtar Singh Signature of attendee 3: Signature of attendee 4: Sukhraj Kaur Gurmeet Singh Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web:  Cybersecurity training requirements and purpose  Phishing attacks.  Removable media.  Passwords and Authentication.  Physical security.  Mobile Device Security.  Working Remotely.  Public Wi-Fi.  Cloud Security  Present insights from review and training to required personnel, and potential related impacts on the workplace The training should occur in front of your trainer/assessor. The student must complete an MS Powerpoint presentation covering all the mentioned above topics. The presentation should include 10- 20 slides. The copy of the presentation must be submitted with this assessment activity. You must use the template provided below to complete this assessment activity: Cybersecurity training and information session How would you evaluate the training provided? (50-100 words)  The training was relevant to the needs and requirements of the audience  Materials provided were helpful  Length of the training was sufficient and complied  The content was well organised  Questions were encouraged  Instructions were clear and understandable  The training met all expectations  The topics covered well in the presentation The training was highly effective and aligned well with the needs and requirements of the audience. The materials provided were not only helpful but also insightful for practical application. The duration of the training was apt, ensuring comprehensive coverage without overwhelming the attendees. Content organization was a strong point, facilitating easy understanding and retention of information. The interactive approach, encouraging questions, made the session engaging. Clear and understandable instructions enhanced the learning experience. Overall, the training met all expectations, thoroughly covering the essential topics in cybersecurity, leaving attendees better informed and prepared. How did others evaluate the training provided? (50-100 words)  The training was relevant to the needs and requirements of the audience  Materials provided were helpful  Length of the training was sufficient and complied  The content was well organised  Questions were encouraged Feedback from other participants indicates a positive reception of the training. Attendees found the training content relevant and tailored to their requirements, appreciating the utility of the provided materials. The length of the training was deemed appropriate, allowing enough time for detailed discussion without causing fatigue. The well-organized content structure facilitated an easier understanding of complex cybersecurity concepts. The encouraging environment for questions led to more interactive and fruitful discussions. Clear instructions enhanced comprehension, making complex cybersecurity topics accessible. Participants felt that the training met their expectations and covered all the key topics effectively, leaving them more knowledgeable and aware of cybersecurity practices and risks. Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2

Level 11, 190 Queen St, Melbourne, 3000 Tel: 03 9606 0032 | Web: c) Communicate review outcomes and cyber security improvement requirements according to organisational policies and procedures   Document: BSBXCS402 - Student Assessment Pack | Version: 1.1 | Page 1 of 2