VCE Software Development U4O2 Word Scramble: Copyright, Essential Eight and the ISM to Mitigation and improving secure development practices (Modules 97–130)
Name:
Date:
Class:
🔤
Word scramble
Unscramble the letters and write each key term on the line.
1
RYCOPHGTI
The legal right of the person who writes original code to control who can copy, share or sell it. Others need the owner's permission, even for a classmate's code.
2
ERFOTSAW CECLENI
A legal agreement stating how you may use, change and share code. Open-source licences allow reuse if you follow their terms, such as giving credit to the author.
3
TAIMTGOINI USEAMER
An action that reduces or eliminates a specific threat, vulnerability or risk, such as a technical, process or people control matched to the risk it addresses.
4
DITICNEN OSENSREP ANPL
A plan written in advance that sets out who does what to detect, contain, recover from and learn from a cyber security incident, including roles, contacts, reporting and review.
5
OELDEVERP GINNTIAR
Ongoing training that gives developers the skills and awareness to write secure code and spot threats such as phishing, which reduces human error.
6
KRSI ATEENMAGNM LNPA
A document that identifies risks to software development, rates them, assigns responses and owners, and sets a schedule for regular review. It links to the threat model.
7
ISKR IERETRGS
A table listing each project risk with its likelihood, impact and planned response (like backups), so the team can tackle the biggest risks first and review them often.
8
DMATNIOMOERCEN
A specific improvement linked to an identified weakness and justified by its benefits, its costs and the criteria it improves, such as laws, frameworks or measurable security.
Answer Key
VCE Software Development U4O2 · Modules 97–130
1RYCOPHGTI → copyright — The legal right of the person who writes original code to control who can copy, share or sell it. Others need the owner's permission, even for a classmate's code.
2ERFOTSAW CECLENI → software licence — A legal agreement stating how you may use, change and share code. Open-source licences allow reuse if you follow their terms, such as giving credit to the author.
3TAIMTGOINI USEAMER → mitigation measure — An action that reduces or eliminates a specific threat, vulnerability or risk, such as a technical, process or people control matched to the risk it addresses.
4DITICNEN OSENSREP ANPL → incident response plan — A plan written in advance that sets out who does what to detect, contain, recover from and learn from a cyber security incident, including roles, contacts, reporting and review.
5OELDEVERP GINNTIAR → Developer training — Ongoing training that gives developers the skills and awareness to write secure code and spot threats such as phishing, which reduces human error.
6KRSI ATEENMAGNM LNPA → risk management plan — A document that identifies risks to software development, rates them, assigns responses and owners, and sets a schedule for regular review. It links to the threat model.
7ISKR IERETRGS → risk register — A table listing each project risk with its likelihood, impact and planned response (like backups), so the team can tackle the biggest risks first and review them often.
8DMATNIOMOERCEN → recommendation — A specific improvement linked to an identified weakness and justified by its benefits, its costs and the criteria it improves, such as laws, frameworks or measurable security.