| Semester 3, 2020 Online | |
| Short Description: | Human Factors Cyber Security |
| Units : | 1 |
| Faculty or Section : | Faculty of Business, Education, Law and Arts |
| School or Department : | School of Management and Enterprise |
| Student contribution band : | Band 2 |
| ASCED code : | 020399 - Information Systems not elsewh |
| Grading basis : | Graded |
Requisites
Co-requisite: CIS5100
Rationale
Cyber security is not just a technology problem, it is also a people problem as people are central to both the risk relating to many cyber threats, and also to mitigating this risk. This course provides insights, strategies and skills in mitigating control weaknesses relating to human behaviour in the organisation that exposes business to cyber security threats.
Synopsis
This course introduces students to finding and fixing vulnerabilities, encryption, intrusion detection and managing cyber risks. The application of appropriate work practices that support good cyber security posture in software applications development, systems administration and information system professional areas are reviewed.
Objectives
On successful completion of this course students should be able to:
- apply specialised knowledge relating to the roles that humans play in causing, enabling and mitigating cyber security risks;
- analyse critically, reflect on and synthesise complex issues, information, problems, concepts and theories relating to the role that people play in cyber security, and how this relates to process, technology and policy;
- examine and then apply specialist knowledge and skills in managing human factors and behaviour to counter cyber threats;
- research and review sources of specialist human behavioural knowledge relating to cyber security knowledge, and how these can be applied towards improved cyber security controls;
- interpret, articulate and communicate complex issues relating to human factors in cyber security to achieve targeted outcomes.
Topics
| Description | Weighting(%) | |
|---|---|---|
| 1. | Introduction to Human Behaviour | 10.00 |
| 2. | Social Engineering | 20.00 |
| 3. | Phishing and related attack vectors and exploits | 20.00 |
| 4. | Human focussed controls | 20.00 |
| 5. | Insider Threats | 10.00 |
| 6. | Effecting behavioural change programs | 20.00 |
Text and materials required to be purchased or accessed
ALL textbooks and materials available to be purchased can be sourced from (unless otherwise stated). (https://omnia.usq.edu.au/textbooks/?year=2020&sem=03&subject1=CIS8710)
Please for alternative purchase options from USQ Bookshop. (https://omnia.usq.edu.au/info/contact/)
Reference materials
Student workload expectations
| Activity | Hours |
|---|---|
| Directed 精东传媒app | 65.00 |
| Private 精东传媒app | 100.00 |
Assessment details
| Description | Marks out of | Wtg (%) | Due Date | Notes |
|---|---|---|---|---|
| Online Test | 20 | 10 | 04 Dec 2020 | |
| Written Assignment | 100 | 40 | 15 Jan 2021 | |
| Open Exam | 100 | 50 | End S3 |
Important assessment information
-
Attendance requirements:
It is the students' responsibility to attend and participate appropriately in all activities scheduled for them, and to study all material provided to them or required to be accessed by them, to maximise their chance of meeting the objectives of the course and to be informed of course-related activities and administration. -
Requirements for students to complete each assessment item satisfactorily:
To satisfactorily complete an individual assessment item a student must achieve at least 50% of the marks for that item. -
Penalties for late submission of required work:
Students should refer to the Assessment Procedure (point 4.2.4) -
Requirements for student to be awarded a passing grade in the course:
To be assured of receiving a passing grade a student must obtain at least 50% of the total weighted marks available for the course (i.e. the Primary Hurdle). -
Method used to combine assessment results to attain final grade:
The final grades for students will be assigned on the basis of the aggregate of the weighted marks obtained for each of the summative items for the course. -
Examination information:
An open examination is one in which candidates may have access to any printed or written material and a calculator during the examination. -
Examination period when Deferred/Supplementary examinations will be held:
Any Deferred or Supplementary examinations for this course will be held during the next examination period. -
精东传媒app Student Policies:
Students should read the USQ policies: Definitions, Assessment and Student Academic Misconduct to avoid actions which might contravene 精东传媒app policies and practices. These policies can be found at .
Evaluation and benchmarking
In meeting the 精东传媒app鈥檚 aims to establish quality learning and teaching for all programs, this course monitors and ensures quality assurance and improvements in at least two ways. This course:
Conforms to the USQ Policy on Evaluation of Teaching, Courses and Programs to ensure ongoing monitoring and systematic improvement and is benchmarked against the internal USQ accreditation/reaccreditation processes which include (i) stringent standards in the independent accreditation of its academic programs, (ii) close integration between business and academic planning, and (iii) regular and rigorous review.