Written(Essay)
Assessment 2
Semester 1, 2024
This document contains answers for both
topics, you will choose one topic.
ASSESSMENT TOPIC 1
Managing information risks is essential
for fostering a robust culture of
information security and technology in
the workplace. Select a real-life case study
and apply the ten principles to guarantee
the effectiveness and success of
information management activities.
[50 marks] OR
ASSESSMENT TOPIC 2
Document security plays a pivotal role in
the broader context of information
security and the overall landscape of
security technology. Critically review the
100% pass guaranteed
, SEP3712/2024
Assessment 2
Semester 1, 2024
ASSESSMENT TOPIC 1
Managing information risks is essential for fostering a robust culture of information security and
technology in the workplace. Select a real-life case study and apply the ten principles to guarantee
the effectiveness and success of information management activities.
One real-life case study that can be used to apply the ten principles of managing information risks is
the Equifax data breach.
Principle 1: Understand the Value of Information
Equifax failed to fully understand the value of the sensitive personal and financial information they
held, which led to significant harm for millions of individuals.
Principle 2: Recognize Ownership of Information
Equifax did not clearly define ownership of the information they held, leading to confusion and lack
of accountability when it came to protecting that information.
Principle 3: Assess Risk
Equifax did not adequately assess the risk of a data breach, as evidenced by their failure to patch a
known security vulnerability in their system.
Principle 4: Manage Risk
Equifax did not effectively manage the risk of a data breach, as they failed to implement necessary
security measures to protect their systems and data.
Principle 5: Minimize Risk