Assignment Problem: The assignment is to test the understanding of the materials and content from the module. The approach is to use a well-documented in the Internet in the Internet the Staysure Limited Case Study and consolidate learning through an application of the approaches learned in the module to the case study examination and solving.
Stage 1: Staysure Limited Case Study Articulation
Task 1 - Summarise the Staysure Limited case study, citing explicitly the source references and description of the case available in the Internet. (>500 words)
Task 2 - Produce a high-level security architecture for the Staysure Limited case study (schemes/diagrams and narrative), citing the source references.
Stage 2: Threat Analysis and Risk Assessment of the Staysure Limited Case Study
Task 3 - Produce a risk assessment of the architecture and system, covering all of the assets, vulnerabilities, threat sources and threat actors, citing the source references when needed. (>500 words)
Task 4 - Write a short summary report making recommendations that would have prevented the breach, citing the source references. (>500 words)
Stage 3: Psychological Motivations and Insider Threat in the Staysure Limited Case Study
Task 5 - Exploring the key psychological motivations that could be used to explain the attack for the Staysure Limited case study. Discuss how aspects of Insider Threat could be used to explore/explain this attack for the Staysure.co.uk Limited case study, citing the source references. Include the possible Insider Threat 'type' that could be at work giving a clear rationale for this choice. (>500 words)
Stage 4: Security Assurance Architecture of the Staysure Limited Case Study
Task 6 - Design a security assurance architecture of the Staysure Limited case study that would have prevented the data breach, citing the source references. Explain your architecture and its components. (>500 words)
Task 7 - Present a set of information security policies covering the system of the Staysure Limited case study, to include overall security policies, citing the source references. Please note that you cannot copy-paste policies presented in the class but need to create your own ones as a policy designer in this case. (>500 words)