Tutorial 2 worksheet - Information Management and Systems

IMS3110 – Semester 2, 2005<br />

IMS3110 – IS SECURITY<br />

TUTORIAL 2 – WORKSHEET<br />

Week Beginning 25 July<br />

Time<br />

frame<br />

Topic ACTIVITY OUTCOMES/tasks/resources<br />

HOUSEKEEPING<br />

45 mins Threats<br />

Vulnerabilities<br />

Breaches<br />

v weekly register<br />

v In <strong>Tutorial</strong> Week 4 group<br />

presentations start – please<br />

remind students they must have<br />

arranged their groups <strong>and</strong> the<br />

week they are presenting –<br />

actual topics can wait<br />

Activity 1:<br />

Mind map: define these terms <strong>and</strong><br />

mind map how they fit together<br />

See group presentations<br />

timetable on page 3. Please fill<br />

this out.<br />

Reference<br />

Activity 2:<br />

See diagram on second page of<br />

this <strong>worksheet</strong>:<br />

Use this to demonstrate<br />

how security threats, turn into<br />

breaches <strong>and</strong> how they impact on<br />

IS vulnerabilities – refer to the<br />

Microsoft website <strong>and</strong> my PPT<br />

slides<br />

Students should develop the<br />

diagram initially this is best<br />

achieved in groups<br />

The following website has some excellent glossary terms please advise students of this <strong>and</strong><br />

use some of these terms in your tutorial<br />

http://www.microsoft.com/security/glossary.mspx#virus<br />

Security guidance for small business offered by Microsoft<br />

http://www.microsoft.com/smallbusiness/gtm/securityguidance/hub.mspx<br />

COMMENTS:<br />

v Students will need your consultation times – please provide these to them <strong>and</strong> to<br />

me<br />

v Please prepare yourselves by reflecting on the lecture notes beforeh<strong>and</strong><br />

v I would appreciate feedback from you, on the way students respond to the tutorial<br />

<strong>worksheet</strong> <strong>and</strong> lectures

---

IMS3110 – Semester 2, 2005<br />

What are the different<br />

threats?<br />

How do threats turn into<br />

breaches?<br />

THREATS<br />

What is the difference<br />

between a threat <strong>and</strong> a<br />

breach?<br />

BREACHES<br />

INFORMATION SYSTEM SECURITY<br />

DATA SECURITY =<br />

Confidentiality, availability, integrity, authenticity<br />

What is a vulnerability?<br />

Discuss some of the different<br />

types of vulnerabilities.<br />

What are the implications for<br />

information systems<br />

VULNERABILITIES

---

IMS3110 – Semester 2, 2005<br />

IMS3110 Group Presentation – Group members <strong>and</strong> topics<br />

<strong>Tutorial</strong> Start date Names of group members presenting Presentation topics<br />

<strong>Tutorial</strong> 1 25 July<br />

No group presentations this week<br />

<strong>Tutorial</strong> 2<br />

1 August<br />

No group presentations this week<br />

<strong>Tutorial</strong> 3 8 August Group presentations 1 & 2 (7.5%)<br />

<strong>Tutorial</strong> 4<br />

<strong>Tutorial</strong> 5<br />

<strong>Tutorial</strong> 6<br />

15 August<br />

22 August<br />

29 August<br />

No group presentations this week<br />

Assignment 1 due in (5%)<br />

Group presentation 3<br />

<strong>Tutorial</strong> 7 5<br />

September<br />

<strong>Tutorial</strong> 8 12<br />

September<br />

<strong>Tutorial</strong> 9 19<br />

September<br />

Group presentation 4<br />

Group presentation 5<br />

Group presentation 6<br />

Group presentation 7 & 8<br />

26 September - 30 September – Mid semester vacation<br />

<strong>Tutorial</strong> 11 3 October No presentations this week<br />

<strong>Tutorial</strong> 12<br />

10 October<br />

Major Assignment due in<br />

assignment box Level 7, S building<br />

at 5.00 pm (20%)<br />

No presentations this week<br />

<strong>Tutorial</strong> 13<br />

17 October<br />

<strong>Tutorial</strong> exercise due (7.5 %)<br />

14-17 25 October Examination period<br />

Group presentations 9 & 10