VCE Software Development U4O2 Crossword: Copyright, Essential Eight and the ISM to Mitigation and improving secure development practices (Modules 97–130)
Name:
Date:
Class:
✎
Crossword
Read each clue and write the matching term in the grid. Numbers in brackets show the letters in each word.
1
2
3
4
5
6
7
8
9
10
Across
- 4. Word 1 of the term in 2 Down: ___________ security _________ (11)
- 8. Word 2 of the term in 6 Down: ISM __________ for ________ ___________ (10)
- 9. Word 4 of the term in 6 Down: ISM __________ for ________ ___________ (8)
- 10. Word 2 of the term in 3 Down: __________ _______ (7)
Down
- 1. Identify the personal information involved, state what the principle requires, then judge whether the organisation's development practice meets it. Word 3 of: Apply a _______ principle (7)
- 2. An ethical issue: people whose data is held can be harmed by a breach the organisation could have prevented, so it has a duty of care to protect them and be open if it fails. Word 3 of: ___________ security _________ (9)
- 3. An action that reduces or eliminates a specific threat, vulnerability or risk, such as a technical, process or people control matched to the risk it addresses. Word 1 of: __________ _______ (10)
- 5. Penalties, lost customer trust and harm caused by weak security in development, such as privacy breaches or copyright infringement, resolved through compliance, openness and better practices. Word 3 of: legal and _______ consequences (7)
- 6. ISM ______ that set security expectations for how ______ is designed, coded, tested and released, such as secure coding, separate environments, code review and testing. Word 5 of: ISM __________ for ________ ___________ (11)
- 7. Ongoing training that gives developers the skills and awareness to write secure code and spot threats such as phishing, which reduces human error. Word 1 of: _________ training (9)
Answer Key
VCE Software Development U4O2 · Modules 97–130
1P
R
2P
I
R
V
A
3M
A
C
4I
N
5E
F
F
E
C
T
I
V
E
T
T
T
Y
I
I
H
6D
7D
C
8G
U
I
D
E
L
I
N
E
S
E
A
C
V
V
9S
O
F
T
W
A
R
E
E
I
L
L
L
O
O
O
N
P
P
M
E
10M
E
A
S
U
R
E
N
T
Across
4INEFFECTIVE — Word 1 of the term in 2 Down: ___________ security _________
8GUIDELINES — Word 2 of the term in 6 Down: ISM __________ for ________ ___________
9SOFTWARE — Word 4 of the term in 6 Down: ISM __________ for ________ ___________
10MEASURE — Word 2 of the term in 3 Down: __________ _______
Down
1PRIVACY — Identify the personal information involved, state what the principle requires, then judge whether the organisation's development practice meets it. Word 3 of: Apply a _______ principle
2PRACTICES — An ethical issue: people whose data is held can be harmed by a breach the organisation could have prevented, so it has a duty of care to protect them and be open if it fails. Word 3 of: ___________ security _________
3MITIGATION — An action that reduces or eliminates a specific threat, vulnerability or risk, such as a technical, process or people control matched to the risk it addresses. Word 1 of: __________ _______
5ETHICAL — Penalties, lost customer trust and harm caused by weak security in development, such as privacy breaches or copyright infringement, resolved through compliance, openness and better practices. Word 3 of: legal and _______ consequences
6DEVELOPMENT — ISM ______ that set security expectations for how ______ is designed, coded, tested and released, such as secure coding, separate environments, code review and testing. Word 5 of: ISM __________ for ________ ___________
7DEVELOPER — Ongoing training that gives developers the skills and awareness to write secure code and spot threats such as phishing, which reduces human error. Word 1 of: _________ training