Skip to main content
Unit outline_

OINF5301: Information Security Management

Semester 2a, 2024 [Online] - Online Program

This unit of study gives a broad view of the management aspects of information security. We emphasise corporate governance for information security, organisational structures within which information security is managed, risk assessment, and control structures. Planning for security, and regulatory issues, are also addressed.

Unit details and rules

Academic unit Computer Science
Credit points 6
Prerequisites
? 
None
Corequisites
? 
None
Prohibitions
? 
INFO5301
Assumed knowledge
? 

This unit of study assumes foundational knowledge of Information systems management. Two year IT industry exposure and a breadth of IT experience will be preferable

Available to study abroad and exchange students

No

Teaching staff

Coordinator Ali Anaissi, ali.anaissi@sydney.edu.au
Tutor(s) Abdallah Lakhdari, abdallah.lakhdari@sydney.edu.au
The census date for this unit availability is 16 August 2024
Type Description Weight Due Length
Supervised exam
? 
Final exam
Proctored final exam
60% Formal exam period 2 hours
Outcomes assessed: LO1 LO2 LO3 LO4 LO5
Assignment Assignment 1
Take-home assignment including short answer questions.
20% Week 03
Due date: 18 Aug 2024 at 23:59
NA
Outcomes assessed: LO1 LO2 LO3 LO4 LO5
Assignment Assignment 2
Case study
20% Week 06
Due date: 08 Sep 2024 at 23:59
NA
Outcomes assessed: LO1 LO2 LO3 LO4 LO5

Assessment summary

Details of each assessment task appears in Canvas for the course.

The assessment contains three main components:

  • Assignment 1: This is an individual assignment that quizzes the knowledge of each student in the topics of weeks 1-3 with questions similar to those on the final exam.
  • Assignment 2: In this practical group assignment, students are asked to analyse a case-study, write a report and deliver a presentation of their analysis and recommendations.
  • Final exam: Online exam that covers all aspects of the course. Obtaining at least 40% of the available marks from the written exam is a requirement to pass OINF5301.

Assessment criteria

The University awards common result grades, set out in the Coursework Policy 2014 (Schedule 1).

As a general guide, a high distinction indicates work of an exceptional standard, a distinction a very high standard, a credit a good standard, and a pass an acceptable standard.

Result name

Mark range

Description

High distinction

85 - 100

Excellent course work

Distinction

75 - 84

Very good course work

Credit

65 - 74

Good course work
 

Pass

50 - 64

Fair course work

Fail

0 - 49

When you don’t meet the learning outcomes of the unit to a satisfactory standard.

For more information see sydney.edu.au/students/guide-to-grades.

It is a policy of the School of Computer Science that in order to pass this unit, a student must achieve at least 40% in the written examination. For subjects without a final exam, the 40% minimum requirement applies to the corresponding major assessment component specified by the lecturer. A student must also achieve an overall final mark of 50 or more. Any student not meeting these requirements may be given a maximum final mark of no more than 45 regardless of their average.

For more information see guide to grades.

Late submission

In accordance with University policy, these penalties apply when written work is submitted after 11:59pm on the due date:

  • Deduction of 5% of the maximum mark for each calendar day after the due date.
  • After ten calendar days late, a mark of zero will be awarded.

This unit has an exception to the standard University policy or supplementary information has been provided by the unit coordinator. This information is displayed below:

Late penalties are applied as per University policy (5% of the maximum mark per day, up to a maximum of 10 days, after which a mark of zero is awarded)

Academic integrity

The Current Student website provides information on academic integrity and the resources available to all students. The University expects students and staff to act ethically and honestly and will treat all allegations of academic integrity breaches seriously.

We use similarity detection software to detect potential instances of plagiarism or other forms of academic integrity breach. If such matches indicate evidence of plagiarism or other forms of academic integrity breaches, your teacher is required to report your work for further investigation.

Use of generative artificial intelligence (AI) and automated writing tools

You may only use generative AI and automated writing tools in assessment tasks if you are permitted to by your unit coordinator. If you do use these tools, you must acknowledge this in your work, either in a footnote or an acknowledgement section. The assessment instructions or unit outline will give guidance of the types of tools that are permitted and how the tools should be used.

Your final submitted work must be your own, original work. You must acknowledge any use of generative AI tools that have been used in the assessment, and any material that forms part of your submission must be appropriately referenced. For guidance on how to acknowledge the use of AI, please refer to the AI in Education Canvas site.

The unapproved use of these tools or unacknowledged use will be considered a breach of the Academic Integrity Policy and penalties may apply.

Studiosity is permitted unless otherwise indicated by the unit coordinator. The use of this service must be acknowledged in your submission as detailed on the Learning Hub’s Canvas page.

Outside assessment tasks, generative AI tools may be used to support your learning. The AI in Education Canvas site contains a number of productive ways that students are using AI to improve their learning.

Simple extensions

If you encounter a problem submitting your work on time, you may be able to apply for an extension of five calendar days through a simple extension.  The application process will be different depending on the type of assessment and extensions cannot be granted for some assessment types like exams.

Special consideration

If exceptional circumstances mean you can’t complete an assessment, you need consideration for a longer period of time, or if you have essential commitments which impact your performance in an assessment, you may be eligible for special consideration or special arrangements.

Special consideration applications will not be affected by a simple extension application.

Using AI responsibly

Co-created with students, AI in Education includes lots of helpful examples of how students use generative AI tools to support their learning. It explains how generative AI works, the different tools available and how to use them responsibly and productively.

Support for students

The Support for Students Policy 2023 reflects the University’s commitment to supporting students in their academic journey and making the University safe for students. It is important that you read and understand this policy so that you are familiar with the range of support services available to you and understand how to engage with them.

The University uses email as its primary source of communication with students who need support under the Support for Students Policy 2023. Make sure you check your University email regularly and respond to any communications received from the University.

Learning resources and detailed information about weekly assessment and learning activities can be accessed via Canvas. It is essential that you visit your unit of study Canvas site to ensure you are up to date with all of your tasks.

If you are having difficulties completing your studies, or are feeling unsure about your progress, we are here to help. You can access the support services offered by the University at any time:

Support and Services (including health and wellbeing services, financial support and learning support)
Course planning and administration
Meet with an Academic Adviser

WK Topic Learning activity Learning outcomes
Week 01 *Introduction, nature and scope of Information Systems Security. *Introduction to technical systems in Information Security Independent study (2.5 hr) LO1 LO2
*Introduction to Information Systems Security *Basics of technical systems in Information Security Tutorial (1.5 hr) LO1 LO2
Week 02 *Network security and overview of cryptography *Formal aspects of information systems security, security policy, authority/responsibility structures Independent study (2.5 hr) LO1 LO2 LO4 LO5
*Network security *Security policies Tutorial (1.5 hr) LO1 LO2 LO4 LO5
Week 03 *Planning and designing for information security *Risk management for information systems security Independent study (2.5 hr) LO2 LO3 LO4 LO5
*Planning and designing for information security *Risk management Tutorial (1.5 hr) LO1 LO2 LO3 LO4 LO5
Week 04 *Corporate governance for information systems security *Informal aspects of information systems security Independent study (2.5 hr) LO1 LO2 LO3
*Corporate governance *Informal and human aspects Tutorial (1.5 hr) LO1 LO2 LO3
Week 05 * Overview of information systems security standards *Legal aspects of information systems security Independent study (2.5 hr) LO1 LO2 LO3 LO4 LO5
*Case study - Standards *Case study - legal aspects Tutorial (1.5 hr) LO1 LO2 LO3 LO4 LO5
Week 06 *Overview of computer forensics *Industry Guest Lecture Independent study (2.5 hr) LO1 LO2 LO3 LO4 LO5
*Data forensics *Case study - Industry Tutorial (1.5 hr) LO1 LO2 LO3 LO4 LO5

Study commitment

Typically, there is a minimum expectation of 1.5-2 hours of student effort per week per credit point for units of study offered over a full semester. For a 6 credit point unit, this equates to roughly 120-150 hours of student effort in total.

Learning outcomes are what students know, understand and are able to do on completion of a unit of study. They are aligned with the University's graduate qualities and are assessed as part of the curriculum.

At the completion of this unit, you should be able to:

  • LO1. Communicate on information security issues to both managers and technical staff.
  • LO2. List and outline major concerns and issues of managing information security
  • LO3. Define, describe and discuss management and governance aspects of information security
  • LO4. Describe risk management methodology and control structures as applied to the management of information security.
  • LO5. Describe and characterise the attributes of information security management practices.

Graduate qualities

The graduate qualities are the qualities and skills that all University of Sydney graduates must demonstrate on successful completion of an award course. As a future Sydney graduate, the set of qualities have been designed to equip you for the contemporary world.

GQ1 Depth of disciplinary expertise

Deep disciplinary expertise is the ability to integrate and rigorously apply knowledge, understanding and skills of a recognised discipline defined by scholarly activity, as well as familiarity with evolving practice of the discipline.

GQ2 Critical thinking and problem solving

Critical thinking and problem solving are the questioning of ideas, evidence and assumptions in order to propose and evaluate hypotheses or alternative arguments before formulating a conclusion or a solution to an identified problem.

GQ3 Oral and written communication

Effective communication, in both oral and written form, is the clear exchange of meaning in a manner that is appropriate to audience and context.

GQ4 Information and digital literacy

Information and digital literacy is the ability to locate, interpret, evaluate, manage, adapt, integrate, create and convey information using appropriate resources, tools and strategies.

GQ5 Inventiveness

Generating novel ideas and solutions.

GQ6 Cultural competence

Cultural Competence is the ability to actively, ethically, respectfully, and successfully engage across and between cultures. In the Australian context, this includes and celebrates Aboriginal and Torres Strait Islander cultures, knowledge systems, and a mature understanding of contemporary issues.

GQ7 Interdisciplinary effectiveness

Interdisciplinary effectiveness is the integration and synthesis of multiple viewpoints and practices, working effectively across disciplinary boundaries.

GQ8 Integrated professional, ethical, and personal identity

An integrated professional, ethical and personal identity is understanding the interaction between one’s personal and professional selves in an ethical context.

GQ9 Influence

Engaging others in a process, idea or vision.

Outcome map

Learning outcomes Graduate qualities
GQ1 GQ2 GQ3 GQ4 GQ5 GQ6 GQ7 GQ8 GQ9

This section outlines changes made to this unit following staff and student reviews.

New unit

Disclaimer

The University reserves the right to amend units of study or no longer offer certain units, including where there are low enrolment numbers.

To help you understand common terms that we use at the University, we offer an online glossary.