Assessment item 5 - Security, Privacy and Resilience strategy

Value: 20%

Due Date: 18-Oct-2021

Return Date: 09-Nov-2021

Group Assessment: No

Submission method options: Alternative submission method

TASK

Read the DR Alarms case study in the Resources section of Interact 2 before attempting this assignment.

Scenario

DR Alarms has been expanding because of the market success of its alarm and monitoring products. In order to keep up with the increasing demand, the company has established a manufacturing plant for its home alarms systems in Hanoi, Vietnam. The completed alarms are shipped to the different sales offices in Australia, New Zealand, Singapore and Germany.

DR Alarms has completed negotiations with an ICS company in Germany. This company is now its sales agent for the entire European Union.

The company has considered whether to provide monitoring services to end-users of its products. An early report to DR Alarms indicated that its use of the AWS Cloud infrastructure gives it a significant advantage as it could monitor systems in many different countries using AWS Edge locations. The company realised that this now gives it a strategic advantage over its European and Asian competitors and has decided to start offering end-user monitoring from the end of 2021 in Australia.

They plan to extend these monitoring services to a new country every three (3) months, beginning with New Zealand in early 2022.  Dr Alarms will also capture configuration, location and type of use data on each device deployed under its monitoring system. This data will be provided to end-user customers, but will also be used by DR Alarms to help improve their product range.

The MD of DR Alarms has considered the analysis report provided on potential strategic options for data protection and privacy loss prevention. He now wants a to develop a security strategy that will provide for:

• Data protection across the company and its different storage sites in AWS and their on-premise data centre.
• Privacy loss protection across the company and its different storage sites in AWS and their on-premise data centre with an emphasis on ensuring that they comply with all relevant privacy regulations in each country where they operate or provide services.
• Data sovereignty protection for their IoT and ICS design data.
• Data resilience for all data.

Tasks

You have again been engaged by DR Alarms to develop their strategy for data protection, privacy loss prevention and data resilience.

You are to provide a report to DR Alarms that:

1. Outlines the strategy, with reasoning, for Data Protection across the company and the different data storage sites used by DR Alarms.  (25 marks)
2. Outlines the strategy, with reasoning, for Privacy Loss Prevention across the company and the different data storage sites used by DR Alarms. This strategy must also ensure that DR Alarms complies with the relevant privacy legislation for each country where they operate. (25 marks)
3. Outlines the strategy, with reasoning, for data sovereignty for the DR Alarms IoT and ICS design data.  (25 marks)
4. Outlines the strategy, with reasoning, for Data Resilience for all data in the different data storage sites used by DR Alarms. (25 marks)

Presentation

Your report should use the following heading structure:

• Data Protection Strategy
• Privacy Loss Prevention Strategy
• Data Sovereignty Strategy
• Data Resilience Strategy

Your report should be about 4,000 words.

Referencing is required in APA 7^th ed. Format.

Your report should not use any template developed by a Government Department or Agency. References to the Australian Government’s Information Security Manual or the Protective Security Policy Framework are not permitted.

REQUIREMENTS

back to top

Assessment tasks that are NOT completed through the Subject site need to be submitted electronically via Turnitin site by the due date. Turnitin class details for this subject will be given by your lecturer.

Unless advised otherwise, all Turnitin submissions are due by midnight (AEST) of the date specified. Please note that the time and the date of your Turnitin submission will be used to determine your official submission time.

All textual elements within an assessment must be submitted in a format that is readable by Turnitin.  Specific exceptions, where an assessment requires the insertion of image-based evidence of workings will be outlined in the context of the assessment. Students that deliberately attempt to insert the content of assessments in a format that is not readable by Turnitin may be subject to Academic misconduct investigations.

Additional Submission Information:

It is recommended that your name, student ID and page number are included in the header or footer of every page of any assignment. You are also required to rename your assignment file before you submit via Turnitin as per below protocol:

SUBJECT CODE, SI/SMI, SURNAME, STUDENT ID, ASSESSMENT NUMBER, SESSION.