Task 3 No slides submitted or presentation is unable to illustrate / discuss key concepts. Slides fail to address the topic, do not show full understanding of what is required. Significant errors. Most requirements of assigned topic covered, but underdeveloped. Slides are overloaded with text. Some errors. Slides cover basic concepts. All requirements of the assigned topic covered. Good design. Good balance of text, media, graphs. Some errors. Slides cover all basic concepts in an informative manner. The slides cover all requirements relating to the topic. A clear degree of original thinking. Very good design. Very good balance of text, media, graphs. Contains a few errors. Clear outline of all key issues. The slides cover all requirements relating to the topic. Highly appropriate selection of key material demonstrating an excellent understanding of the assigned topic. Professional design and presentation. An excellent exposition of relevant issues. No errors or very few minor errors. Clear illustrative explanation of key issues.

Task 2 The student had not submitted the task or the task is incomplete. Not sufficient material is provided. Limited in breadth and depth demonstrated. Very weak policy organisation. Poor structure. The student has made a reasonable effort to develop the security policy. Most sections are appropriate. Policy organisation is appropriate. Some planning but completion is rushed. Satisfactory structure. The student has demonstrated a clear understanding of developing a security policy. Solutions are appropriate to task. Good use of subject material and planning processes. A theme is present, but underdeveloped. Good structure. Very good level of knowledge and understanding demonstrated. Very good breadth & depth demonstrated appropriate to topic. Policy relates directly to task. Strong engagement with subject material and processes, evaluation of alternatives. Very good and clear structure. Excellent breadth & depth demonstrated. Excellent level of knowledge and understanding demonstrated. Covers all relevant points and issues. Considerable depth of engagement in the task and material is clearly documented. Excellent structure.

Criteria Fail (< 50) Pass (50 – 59) Reasonable (60 – 69) Good (70 – 79) Excellent (>80) Task 1 Superficial discussion of the topics. No critical thought. Lack of originality. No memo style is followed. Reasonable evidence of some understanding. Some comparison is included in the arguments. Very limited discussion that does not demonstrate critical thought. Memo style is unclear. Clear definitions of the relevant issues. Ideas presented with some issues in clarity. Some of the proposed solutions are not supported or justified. Report may contain some errors. Memo style is adequately used. The report demonstrates an excellent understanding of the topic, covering all key issues, demonstrating critical opinion. The proposed solutions are justified and of very good standard. No errors. High academic learning ability achieved. Detailed planning and clear rationale for decisions. Exceptional quality of output demonstrating professionalism, reasoning, and methodological thinking.

Task 3, Assessment Criteria Mark Available Contents and subject area 8 Development of topic 7 Layout/ Design and references 5 Total 20

Task 2, Assessment Criteria Mark Available Organisation of policy 15 Quality/ Clarity of arguments 14 Consideration of issues/ Risk assessment 13 Presentation and design 8 Total 50

Task 1, Assessment Criteria Mark Available Outline of the identified problems 10 Description of proposed solutions 10 Style and references 5 Total 25

You are expected to demonstrate an insight into the implications of the problem introduced in each task by using clear and concise arguments. The reports should be well written (and word-processed), showing good skills in creativity and design. Sentences should be of an appropriate length and the writing style should be brief but informative. During the teaching weeks you will have the opportunity to submit draft copies of your portfolio activities. The module team will provide feedback based on your draft copies and advice regarding your progress (if it is deemed necessary).

This is an individual assessment comprised of three tasks. Task 1 carries 25%, task 2 carries 50% and task 3 carries 20% of the overall portfolio mark. An extra 5% is carried for the overall portfolio conclusion and reflection. Task 1 will assess essential facts, concepts and principles of security controls and IT security development and management and exercise critical evaluation of information sources. Task 2 will assess your understanding on national and international information security standards, government policies, and compliance legislation. Also, it will enable you to demonstrate detailed knowledge and understanding of information risk assessment and security management as well as confidence and flexibility in security standards, managing security incidents and related IT security problems in systems development and implementation. Task 3 will assess a range of current security management techniques and how the principles of information risk assessment, incident management and information assurance methods are embodied therein.

1. For undergraduate modules, a score of 40% or above represents a pass mark. 2. For postgraduate modules, a score of 50% or above represents a pass mark. 3. For work submitted up to 5 working days late marked is capped to a bare pass (40% for undergraduate and 50% for postgraduate). 4. For work submitted more than 5 working days a mark of zero will be awarded for the assignment.