VCE Data Analytics - U4O2 - Cyber Security: Data Security

1 Goals and objectives of medium and large organisations 2 Safeguarding business operations 3 Mitigating financial loss and reputational damage 4 Regulatory compliance 5 Asset 6 Threat 7 Accidental threats to data 8 Deliberate threats to data 9 Events-based threats to data 10 Insider threats and human error 11 Malware 12 Ransomware 13 Social engineering 14 Denial of service attacks 15 Unauthorised network access 16 Vulnerability 17 Risk as likelihood and impact 18 Risk rating matrix 19 Integrity 20 Data quality: accuracy 21 Data integrity characteristic: authenticity 22 Data integrity characteristic: correctness 23 Data integrity characteristic: reasonableness 24 Data quality: relevance 25 Data integrity characteristic: timeliness 26 Assessing data against the six integrity characteristics 27 Consequence of diminished data integrity: loss of reputation 28 Consequence of diminished data integrity: poor decision-making 29 Consequence of diminished data integrity: financial loss 30 Consequence of diminished data integrity: legal issues 31 Consequence of diminished data integrity: impacted operations 32 Confidentiality 33 Integrity as a security evaluation criterion 34 Availability 35 Evaluating a security strategy against confidentiality, integrity and availability 36 Proposing evaluation criteria for security effectiveness 37 Security controls: prevent, detect, respond 38 Authentication vs authorisation 39 Authentication factors 40 Weak passwords 41 Multi-factor authentication 42 Types of MFA 43 Biometric authentication 44 Adaptive (risk-based) authentication 45 Limits of MFA 46 User permissions: read, write and execute 47 The principle of least privilege 48 Role-based access control 49 Access control lists 50 Firewalls 51 Antivirus software 52 Software malware updates 53 Operating system updates 54 Staff procedures 55 Physical security controls 56 ISM guideline: segmentation and segregation 57 Access logs and audit trails 58 Data loss prevention controls 59 Security measures to protect personal information 60 Encryption and decryption 61 Protecting data at rest 62 Protecting data in transit 63 HTTPS and the padlock 64 Caesar cipher 65 Polyalphabetic ciphers 66 Vigenere cipher 67 Symmetric encryption 68 AES 69 Asymmetric encryption 70 RSA 71 ECDH 72 ECDSA 73 Comparing symmetric and asymmetric keys 74 Hashing functions 75 Using hashes to check data integrity 76 Why passwords are stored as hashes 77 Salting a password hash 78 Choosing a cryptographic technique for a scenario 79 Purpose of a disaster recovery plan 80 Disaster recovery plan feature: evacuation 81 Backup strategies 82 Full backup 83 Incremental backup 84 Differential backup 85 Comparing full, incremental and differential backups 86 Backup systems 87 Backup storage locations and the 3-2-1 rule 88 Disaster recovery plan feature: restoration 89 Disaster recovery plan feature: communication 90 Disaster recovery plan feature: testing 91 Evaluating a disaster recovery plan 92 Personal data 93 Sensitive information 94 Privacy Act 1988 (Cwlth) 95 What the Australian Privacy Principles are 96 Australian Privacy Principle 1 97 APP 3: collecting only what is reasonably necessary 98 APP 4: dealing with unsolicited personal information 99 APP 5: notifying people when collecting data 100 Australian Privacy Principle 6 101 APP 7: direct marketing 102 Australian Privacy Principle 11 103 Critiquing a system against the Australian Privacy Principles 104 Privacy and Data Protection Act 2014 (Vic) 105 IPP 1: collection of personal information 106 Information Privacy Principle 2 107 Information Privacy Principle 4 108 Information Privacy Principle 5 109 IPP 10: sensitive information 110 Health Records Act 2001 (Vic) 111 Health Privacy Principle 1: collection 112 Health Privacy Principle 2 113 Health Privacy Principle 4: data security and retention 114 Health Privacy Principle 5 115 Comparing the three privacy laws 116 Data breach 117 Privacy Amendment (Notifiable Data Breaches) Act 2017 118 Eligible data breach and serious harm (ss 26WE, 26WF) 119 Assessing a suspected breach (s 26WH) 120 Statement to the Commissioner (ss 26WK, 26WR) 121 Notifying affected individuals (s 26WL) 122 Applying the Notifiable Data Breaches scheme to a scenario 123 Privacy-enhancing practices as an emerging trend 124 Emerging trends in cyber security 125 How does an AI actually work? 126 AI-based network security software 127 Machine learning analysis of network traffic 128 Real-time monitoring and notification 129 Intrusion detection systems (IDS) 130 Intrusion prevention systems (IPS) 131 Incident response: detect, contain, recover 132 Responding to a suspected compromise 133 Zero Trust Architecture 134 User behaviour analytics: building a baseline 135 User behaviour analytics: detecting anomalies 136 Privacy and accuracy limits of behaviour monitoring 137 Attackers using AI 138 Ethical issue: data collection and use 139 Ethical issue: misuse of personal data and information 140 Ethical issue: identity theft 141 Ethical issue: lack of transparency 142 Ethical issue: lack of transparency after a cyber security incident 143 Anonymising data 144 Ethical issue: repurposing and sharing of data by AI systems 145 Australia’s Artificial Intelligence (AI) Ethics Principles 146 Analysing an ethical issue in a data scenario 147 Analysing a data breach and its impact on an organisation 148 Describing an organisation's current security strategies 149 Legal and ethical consequences of ineffective security 150 Recommending and justifying security improvements

18

VCE Data Analytics U4O2: Why data security matters and types of threats Students learn why data and information security matters to medium and large organisations and how accidental, deliberate and events-based threats, risk and vulnerabilities are identified and rated.

13

VCE Data Analytics U4O2: Data integrity and its consequences Students learn the six characteristics of data integrity and the consequences for an organisation when integrity is diminished.

28

VCE Data Analytics U4O2: Evaluating security with CIA and security controls Students learn to evaluate security strategies against confidentiality, integrity and availability and to describe controls that prevent and track unauthorised access and minimise data loss.

19

VCE Data Analytics U4O2: Cryptography to protect data Students learn how ciphers, symmetric and asymmetric keys and hashing functions protect data at rest and in transit.

13

VCE Data Analytics U4O2: Disaster recovery plans Students learn the features of a disaster recovery plan (evacuation, backing up, restoration, communication and testing) and how to evaluate one.

12

VCE Data Analytics U4O2: Privacy Act 1988 and the Australian Privacy Principles Students learn what personal and sensitive information is and how the Privacy Act 1988 (Cwlth) and APPs 1, 3, 4, 5, 6, 7 and 11 control the collection, use and security of data.

12

VCE Data Analytics U4O2: Victorian privacy and health records legislation Students learn how the Privacy and Data Protection Act 2014 (IPPs 1, 2, 4, 5, 10) and the Health Records Act 2001 (HPPs 1, 2, 4, 5) apply to organisations and how the three privacy laws compare.

7

VCE Data Analytics U4O2: Notifiable Data Breaches scheme Students learn what an eligible data breach is and the steps an organisation must take to assess, report and notify under the Notifiable Data Breaches scheme.

15

VCE Data Analytics U4O2: Emerging trends in cyber security Students learn emerging trends in protecting data, including AI-based protection, modern authentication, threat detection and response, user behaviour analytics and privacy protection.

13

VCE Data Analytics U4O2: Ethical issues and case-study analysis Students learn the ethical issues arising from data security practices and apply their knowledge to analyse breaches, evaluate security strategies and recommend justified improvements.

✎

VCE Innovative Solutions Crossword: Gantt Charts and Project Management and more (Part 2 of 2) 10 clues · Gantt Charts and Project Management, Design Tool - Mock-ups, Design Tool - Storyboards, Design Tool - Sitemap and more

🔎

VCE Innovative Solutions Word Search: Impact of Emerging Trends in Digital Systems and more (All modules) 20 words to find · Impact of Emerging Trends in Digital Systems, Characteristics of Creative and Innovative Solutions, Functions and Capabilities of Digital Systems, Ideation Techniques and more

✎

VCE Cyber Security Crossword: Emerging trends in cyber security to Antivirus software (Modules 1–10) 10 clues · Emerging trends in cyber security, Regulatory compliance, Zero Trust Architecture, Routers and more

✎

VCE Cyber Security Crossword: AI-based network security software and more (Modules 11–20) 10 clues · AI-based network security software, Intrusion detection systems (IDS), Intrusion prevention systems (IPS), Wired communications technology and more

✎

VCE Cyber Security Crossword: Local Area Networks (LANs) to Viruses (Modules 21–30) 10 clues · Local Area Networks (LANs), Wide Area Networks (WANs), Wireless Personal Area Networks (WPANs), Global exposure to cyber security threats and more

✎

VCE Cyber Security Crossword: Worms to Operating system updates (Modules 31–40) 10 clues · Worms, Ransomware, Denial of service attacks, Improper credential management and more

✎

VCE Cyber Security Crossword: Software malware updates to RSA (Modules 41–50) 10 clues · Software malware updates, Staff procedures, Encryption and decryption, Caesar cipher and more

✎

VCE Cyber Security Crossword: ECDH to ISM guideline: network access controls (Modules 51–60) 10 clues · ECDH, ECDSA, Machine learning analysis of network traffic, Real-time monitoring and notification and more

✎

VCE Cyber Security Crossword: ISM guideline: confidentiality and integrity of wireless traffic and more (Modules 61–74) 10 clues · ISM guideline: confidentiality and integrity of wireless traffic, ISM guideline: wireless network footprint, Privacy Act 1988 (Cwlth), Australian Privacy Principle 1 and more

🔎

VCE Cyber Security Word Search: Emerging trends in cyber security and more (Modules 1–20) 20 words to find · Emerging trends in cyber security, Regulatory compliance, Zero Trust Architecture, Routers and more

🔎

VCE Cyber Security Word Search: Local Area Networks (LANs) to Operating system updates (Modules 21–40) 20 words to find · Local Area Networks (LANs), Wide Area Networks (WANs), Wireless Personal Area Networks (WPANs), Global exposure to cyber security threats and more

🔎

VCE Cyber Security Word Search: Software malware updates to Information Privacy Principle 5 (Modules 41–74) 22 words to find · Software malware updates, Staff procedures, Encryption and decryption, Caesar cipher and more

✎

Issues in Technology Crossword: Is AI using too much power? and more (Part 1 of 2) 10 clues · Is AI using too much power?, How does an AI actually work?, Compression - losing quality or saving space?, Why file size matters and more

🔎

Issues in Technology Word Search: Is AI using too much power? to What is RADCAB? (All modules) 22 words to find · Is AI using too much power?, How does an AI actually work?, Compression - losing quality or saving space?, Why file size matters and more

✎

Years 5–6 Data & Information Crossword: Analysing and visualising data and Digital footprint and privacy (Modules 31–56) 10 clues · Choosing the right chart, Column and bar charts, Line charts, Pie charts and more

🔎

Years 5–6 Data & Information Word Search: Acquiring and manipulating data to Digital footprint and privacy (Modules 21–56) 20 words to find · Cleaning data, Formulas start with =, Arithmetic operators + - * /, The SUM function and more

✎

Years 7–8 Digital Systems Crossword: Data transmission and network security and Account security and cyber threats (Modules 26–74) 10 clues · Comparing wired and wireless networks, Wi-Fi range and interference, HTTPS and the padlock, Securing a Wi-Fi network and more

🔎

Years 7–8 Digital Systems Word Search: Hardware for particular tasks to Account security and cyber threats (Modules 4–74) 20 words to find · CPU clock speed (GHz), CPU cores, HDD vs SSD performance, Storage units: KB, MB, GB, TB and more

✎

Years 9–10 Digital Systems Crossword: Controlling and securing access to data (Modules 13–24) 10 clues · Confidentiality, Integrity, Availability, Authentication vs authorisation and more

✎

Years 9–10 Digital Systems Crossword: Controlling and securing access to data and Threats and software vulnerabilities (Modules 25–40) 10 clues · Salting a password hash, Brute-force and dictionary attacks, Asset, Threat and more

✎

Years 9–10 Digital Systems Crossword: Threats and software vulnerabilities to Software supply chain vulnerabilities (Modules 41–69) 10 clues · SQL injection, Buffer overflow, Zero-day vulnerabilities, Insider threats and human error and more

✎

Years 9–10 Digital Systems Crossword: Software supply chain vulnerabilities and Threat modelling and security responses (Modules 70–79) 10 clues · Reducing supply chain risk, Risk as likelihood and impact, Risk rating matrix, Data flow diagram of a system and more

🔎

Years 9–10 Digital Systems Word Search: Controlling and securing access to data and Threats and software vulnerabilities (Modules 13–40) 20 words to find · Confidentiality, Integrity, Availability, Authentication vs authorisation and more

🔎

Years 9–10 Digital Systems Word Search: Threats and software vulnerabilities to Threat modelling and security responses (Modules 41–79) 20 words to find · SQL injection, Buffer overflow, Zero-day vulnerabilities, Insider threats and human error and more

✎

VCE Data Analysis Crossword: Data types and data characteristics to Privacy and the Australian Privacy Principles (Modules 25–37) 10 clues · Characteristic of data: accessibility, Characteristic of information: clarity, Characteristic of information: context, Data quality: accuracy and more

✎

VCE Data Analysis Crossword: Privacy and the Australian Privacy Principles and Ethics and APA referencing (Modules 38–54) 10 clues · APP 2: anonymity and pseudonymity, Holding information only for its primary purpose, Security measures to protect personal information, Critiquing a system against the Australian Privacy Principles and more

🔎

VCE Data Analysis Word Search: Data types and data characteristics to Ethics and APA referencing (Modules 25–54) 20 words to find · Characteristic of data: accessibility, Characteristic of information: clarity, Characteristic of information: context, Data quality: accuracy and more

✎

VCE Software Development U3O2 Crossword: Analytical tools and the software requirements specification and Legal requirements for copyright, ownership and privacy (Modules 52–71) 10 clues · Purpose of a software requirements specification (SRS), SRS content: requirements, constraints and scope, SRS content: user characteristics and technical environment, SRS content: analytical tools depicting existing systems and more

✎

VCE Software Development U3O2 Crossword: Legal requirements for copyright, ownership and privacy to Ideation and evaluating design ideas (Modules 72–85) 10 clues · IPP 10: sensitive information, File naming, shared folders and version history, Version control for software projects, Full backup and more

🔎

VCE Software Development U3O2 Word Search: Analytical tools and the software requirements specification to Ideation and evaluating design ideas (Modules 52–85) 20 words to find · Purpose of a software requirements specification (SRS), SRS content: requirements, constraints and scope, SRS content: user characteristics and technical environment, SRS content: analytical tools depicting existing systems and more

✎

VCE Data Analytics U3O2 Crossword: Data integrity to Evaluating designs and design tools (Modules 76–146) 10 clues · Data integrity: reasonableness, Data integrity: timeliness, Participant information statement, Consent form and more

🔎

VCE Data Analytics U3O2 Word Search: Research questions and project planning to Evaluating designs and design tools (Modules 3–146) 21 words to find · What a research question is, Research question feature: clarity, Research question feature: measurability of data requirements, Research question feature: feasibility and more

✎

Crossword: Why data security matters and types of threats and Data integrity and its consequences (Modules 1–25) 10 clues · Goals and objectives of medium and large organisations, Safeguarding business operations, Mitigating financial loss and reputational damage, Accidental threats to data and more

✎

Crossword: Data integrity and its consequences and Evaluating security with CIA and security controls (Modules 26–43) 10 clues · Assessing data against the six integrity characteristics, Consequence of diminished data integrity: loss of reputation, Consequence of diminished data integrity: poor decision-making, Consequence of diminished data integrity: financial loss and more

✎

Crossword: Evaluating security with CIA and security controls to Disaster recovery plans (Modules 44–79) 10 clues · Adaptive (risk-based) authentication, Physical security controls, Data loss prevention controls, Protecting data at rest and more

✎

Crossword: Disaster recovery plans to Victorian privacy and health records legislation (Modules 80–113) 10 clues · Disaster recovery plan feature: evacuation, Backup storage locations and the 3-2-1 rule, Disaster recovery plan feature: restoration, Disaster recovery plan feature: communication and more

✎

Crossword: Victorian privacy and health records legislation to Emerging trends in cyber security (Modules 115–134) 10 clues · Comparing the three privacy laws, Privacy Amendment (Notifiable Data Breaches) Act 2017, Eligible data breach and serious harm (ss 26WE, 26WF), Assessing a suspected breach (s 26WH) and more

✎

Crossword: Emerging trends in cyber security and Ethical issues and case-study analysis (Modules 135–150) 10 clues · User behaviour analytics: detecting anomalies, Privacy and accuracy limits of behaviour monitoring, Attackers using AI, Ethical issue: data collection and use and more

🔎

Word Search: Why data security matters and types of threats to Evaluating security with CIA and security controls (Modules 1–43) 22 words to find · Goals and objectives of medium and large organisations, Safeguarding business operations, Mitigating financial loss and reputational damage, Accidental threats to data and more

🔎

Word Search: Evaluating security with CIA and security controls to Victorian privacy and health records legislation (Modules 44–113) 21 words to find · Adaptive (risk-based) authentication, Physical security controls, Data loss prevention controls, Protecting data at rest and more

🔎

Word Search: Victorian privacy and health records legislation to Ethical issues and case-study analysis (Modules 115–150) 21 words to find · Comparing the three privacy laws, Privacy Amendment (Notifiable Data Breaches) Act 2017, Eligible data breach and serious harm (ss 26WE, 26WF), Assessing a suspected breach (s 26WH) and more