Subject Code:

TECH5100

Subject Name:

Penetration Testing

Assessment Title:

Cybersecurity Risk Assessment Portfolio

Assessment Type:

Individual Project Portfolio Strategy

Word Count:

2000 Words (+/-10%)

Weighting:

40 %

Total Marks:

40

Submission:

MyKBS

Due Date:

Week 13

LO1

Evaluate appropriate countermeasures to mitigate the risk of unauthorised access, hacks and exploits to systems, networks, and applications.

LO2

Investigate cyber-attack techniques on computer systems, networks, and web applications.

LO3

Evaluate existing defensive security measures.

LO4

Create simulated cyber-attacks to identify vulnerabilities.

Traffic Light

Amount of Generative Artificial Intelligence (GenerativeAI) usage

Evidence Required

This assessment

( ? )

Level 1

Prohibited:

No GenerativeAI allowed

This assessment showcases your individual knowledge, skills and/or personal experiences in the absence of Generative AI support.

The use of generative AI is prohibited for this assessment and may potentially result in penalties for academic misconduct, including but not limited to a mark of zero for the assessment.

Level 2

Optional:

You may use GenerativeAI for research and content generation that is appropriately referenced.

See assessment instructions for details

This assessment allows you to engage with Generative AI as a means of expanding your understanding, creativity, and idea generation in the research phase of your assessment and to produce content that enhances your assessment. I.e., images. You do not have to use it.

The use of GenAI is optional for this assessment.

Your collaboration with GenerativeAI must be clearly referenced just as you would reference any other resource type used. Click on the link below to learn how to reference GenerativeAI.

https://library.kaplan.edu.au/referencing- other-sources/referencing-other-sources- generative-ai

In addition, you must include an appendix that documents your GenerativeAI collaboration including all prompts and responses used for the assessment.

Unapproved use of generative AI as per assessment details during the content generation parts of your assessment may potentially result in penalties for academic misconduct, including but not limited to a mark of zero for the assessment. Ensure you follow the specific assessment instructions in the section above.

?

Level 3

Compulsory:

You must use GenerativeAI to complete your assessment

See assessment instruction for details

This assessment fully integrates Generative AI, allowing you to harness the technology's full potential in collaboration with your own expertise.

Always check your assessment instructions carefully as there may still be limitations on what constitutes acceptable use, and these may be specific to each assessment.

You will be taught how to use generative AI and assessed on its use.

Your collaboration with GenerativeAI must be clearly referenced just as you would reference any other resource type used. Click on the link below to learn how to reference GenerativeAI.

https://library.kaplan.edu.au/referencing- other-sources/referencing-other-sources- generative-ai

In addition, you must include an appendix that documents your GenerativeAI collaboration including all prompts and responses used for the assessment.

Unapproved use of generative AI as per assessment details during the content generation parts of your assessment may potentially result in penalties for academic misconduct, including but not limited to a mark of zero for the

assessment. Ensure you follow the specific assessment instructions in the section above.

Marking Criteria

| 40 marks

F (Fail) 0 49%

P (Pass) 50 64%

C (Credit) 65 74%

D (Distinction) 75 84%

HD (High Distinction) 85 100%

Executive Summary

| 2.5 marks

Lacks clear executive summary and Introduction to the risk assessment project to be undertaken. No conciseness in the summary. No Inclusion of high-level findings and recommendations. No Clear presentation of risk mitigation strategies.

Demonstrates a basic executive summary and Introduction to the risk assessment project to be undertaken but misses or misinterprets some key concepts.

Basic conciseness in the summary. Basic findings and recommendations.

Basic presentation of risk mitigation strategies.

Demonstrates a good executive summary and Introduction to the risk assessment project to be undertaken with minor inaccuracies.

Good conciseness in the summary. Good Inclusion of high-level findings and recommendations.

Good and clear presentation of risk mitigation strategies.

Demonstrates a deep understanding and thorough coverage of the executive summary and Introduction to the risk assessment project to be undertaken. Deep conciseness in the summary. Deep Inclusion of high-level findings and recommendations.

Deep presentation of risk mitigation strategies.

Demonstrates an expert-level executive summary and Introduction to the risk assessment project to be undertaken and offers unique insights into the topic. Expert- level conciseness in the summary. Expert-level Inclusion of high-level findings and recommendations.

Expert-level presentation of risk mitigation strategies.

Introduction

| 5 marks

Lacks No Clear articulation of the project background and objectives, explicit delineation of the scope and boundaries and no engaging introduction.

Demonstrates Basic articulation of the project background and objectives, with a basic delineation of the scope and boundaries and a basic engaging introduction.

Demonstrates Good articulation of the project background and objectives, with a good delineation of the scope and boundaries and a good engaging introduction.

Demonstrates Deep articulation of the project background and objectives, with a deep delineation of the scope and boundaries and a deep engaging introduction.

Demonstrates expert- level articulation of the project background and objectives, with an excellent delineation of the scope and boundaries and an expert-level engaging introduction.

Risk Assessment Methodology

| 10 marks

Lacks a comprehensive description and evidence of the Risk Assessment Methodology used with no clarity or the use of

It has a basic description and evidence of the Risk Assessment Methodology used but lacks flow or clarity and

Well-organised with a clear description and evidence of the Risk Assessment Methodology used with a good flow or clarity

Strong description of evidence and the Risk Assessment Methodology used with great flow and clarity and the use of tools

Exceptionally description of evidence and the Risk Assessment Methodology used, well-organised and

tools and techniques, Diagrams, Charts, or Visuals.

the use of tools and techniques, clear Diagrams, Charts, or Visuals.

and the use of tools and techniques, Diagrams, Charts, or Visuals.

and techniques, Diagrams, Charts, or Visuals.

seamlessly with excellent flow or clarity and the use of tools and techniques, Diagrams, Charts, or

Visuals.

Risk identification, analysis, and mitigation strategies

| 10 marks

Does not provide or inaccurately provides risk identification, analysis, and mitigation strategies information.

Provides minimal or generic risk identification, analysis, and mitigation strategies information.

Offers relevant and clear risk identification, analysis, and mitigation strategies information.

Provides detailed and highly relevant risk identification, analysis, and mitigation strategies information.

Exceptionally detailed and excellent relevant risk identification, analysis, and mitigation strategies information.

Findings and Recommendations

| 5 marks

Lacks evidence of findings and well- researched recommendations. No clear action plans for short-term and long- term improvements.

Contains basic evidence of findings and well-researched recommendations. Basic action plans for short-term and long- term improvements.

Contains good evidence of findings and well-researched recommendations. Good action plans for short-term and long- term improvements.

Contains detailed evidence of findings and well-researched recommendations. Detailed action plans for short-term and long- term improvements.

Seamlessly integrates top-quality, original, or uniquely insightful evidence of findings and well-researched recommendations. Top- quality and original action plans for short- term and long-term

improvements.

Conclusion, or key takeaways

| 2.5 marks

Lacks conclusion, or key takeaways related to risk assessment. No succinct summary of the assessment results.

Has a basic conclusion, or key takeaways related to risk assessment with some errors. Basic succinct summary of the assessment results.

Contains well- structured conclusions, or key takeaways related to risk assessment. Well- structured succinct summary of the assessment results.

Almost perfect conclusion, or key takeaways related to risk assessment.

A succinct summary of the assessment results.

Impeccable conclusion, or key takeaways related to risk assessment. Excellent Succinct summary of the assessment results.

Format Structure & Organisation (cover page, table of

Lacks clear structure, professional

organisation, and easy- to-follow headings for

It has a basic structure and professional

organisation but lacks in flow, headings for

Well-organised with a clear structure and

professional organisation, easy-to-

Strong structure and professional

organisation with great flow, headings for

It has an exceptionally professional-organised

structure, seamlessly leading the Learner

contents, headings for sections, subsections , and page numbers)

| 2.5 marks

different sections.

different sections as well as grammar, and spelling.

follow headings for different sections, grammar, and spelling.

different sections, and good grammar, and spelling.

through the content with great headings for different sections, good grammar, and spelling.

Citation & Referencing

| 2.5 marks

Lacks citations or has many errors in referencing.

Has basic citations with some errors.

Mostly accurate citations with a consistent style.

Almost perfect citations and references with a consistent style.

Impeccable citation and referencing, strictly adhering to a consistent style.

Feedback and grades will be released via MyKBS