CSG3309: IT Security Management Case Study: NSW Services Data Breach - IT Assignment Help

Assignment Task:

Task:

Purpose

The purpose of this assignment is to support the following unit Learning Outcomes (LO) for this unit.

LO1: Outline the impact of ethical and legal issues associated with information security and IT security management

LO3: Analyse and report on information technology security management issues and emergent trends

Background:

NSW Service Case Study Service NSW is a State Government executive agency that delivers a variety of services to NSW residents including, but not limited to; drivers licence, births, deaths and marriage certificates, firearms licences, and educational services among others. In late March to early April 2020, Service NSW suffered two cyber security attacks in a relatively short time frame. In mid-April 2020, Service NSW discovered that an employee's email account was accessed and used to send an email to approximately 2,725 of its users. After consultation with a cyber security analyst, it was found there were likely to have been two separate business email compromise instances, in which an external threat actor sent phishing emails targeting Service NSW employees from a spoofed domain. The phishing campaign prompted employees to visit a fake Office 365 login page which solicited employee credentials. Consequently, 47 staff members had their email accounts compromised that resulted in a breach of approximately five million documents whereby 500,00 were likely sensitive or personal information.

Task

This assignment requires you to do your own research and relies on material from week 1 to week 4 Using the unit material (particularly the first four modules) and academic literature, present a brief report on the NSW Service data breach. You should research the case and a provide a report that includes the following:

1. Briefly introduce NSW Service and describe the data breach that occurred in late March of 2020

2. Identify the threats NSW Service faced in this particular case and depict these threats using a mind map or diagram. You may use a timeline to depict the chain of events, however this is not mandatory. Threats should be appropriately categorised. The diagram should be accompanied with an overview or outline of the threat landscape to provide context.

3. Discuss the CIA triad and how these principles relate to the information security breach, i.e., what information was breached and discuss whether or not confidentiality, integrity or availability were breached and how.

4. Discuss the legal and ethical issues associated with the breach, this may include the Privacy Act and Australian Privacy Principles (APP’s), in addition, any consequential lawsuits or associated legislation.

5. Provide a summary analysis of what went wrong from a managerial perspective and what could have prevented the breach. How can Service NSW improve their Information Security posture?

This CSG3309 IT Assignment has been solved by our IT Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.