Assessment Task 4

– Portfolio of Evidence

Student Name Student Number

Unit Code/s &
VU21992 Develop a cyber security Industry project
Name/s
Assessment Name Project Reporting Assessment Task No. AT4
Assessment Due
Date submitted
Date
Assessor Name
Student Declaration: I declare that this assessment is my own work. Any ideas and comments made
by other people have been acknowledged as references. I understand that if this statement is found to
be false, it will be regarded as misconduct and will be subject to disciplinary action as outlined in the
TAFE Queensland Student Rules. I understand that by emailing or submitting this assessment
electronically, I agree to this Declaration in lieu of a written signature.

Student Signature Date

Instructions to Student This assessment forms the project planning stage of the Incident
Response Team Exercise (IRTx).
The objective of this assessment is to demonstrate the skills and
knowledge to develop an effective method of evaluating the
effectiveness of an enterprise’s incident response and handing
procedures.
This is a team assessment and will be conducted during class.

The team will be required to keep minutes of all team, stakeholder and,
project sponsor meetings. These will be submitted as appendix within
the final project documentation.

Location: Depending on the mode of delivery (face-to-face, blended, on-line),

you may be using the computers in Lap or at home.

Assessment Criteria:
• Reviews the team’s performance against the objective of developing
an Incident Response Team Exercise

• Validate the team objectives against the project targets

• Proposes changes/improvements to the project development process

VU21992_AT4_PE_v1 Page 1 of
 • Review of effectiveness of Incident/Event Identification Strategy
• IRTx Evaluation report

• Presentation material was appropriate for purpose

• Team members answered questions in an appropriate manner

• Presentation duration was 15 minutes (between 12 – 20 minutes is ac-

ceptable)
• Presentation was structured and organised

Instructions to Examination Range and Conditions:

Assessor Students need to be provided with a suitable environment with which to
perform router configuration and troubleshooting. PCs must have an
operating system such as Windows or Linux pre-installed. Ensure that
suitable WHS procedures are followed.

Students need to be provided with some organisational guidelines that are

suitable for the scenario. It is recommended that you use documents which
are relevant to the student, e.g. business policies from the business that they
work in, or business policies from the TAFE campus which they attend.

Materials to be supplied:
You will have access to equipment in the TAFE lab rooms to perform the
tasks.
Note to Student An Assessment Mapping Matrix is available from your teacher upon request.
The mapping matrix shows how the knowledge and skills that you are being
asked to demonstrate align to the requirements of each Unit of Competency.
Submission Detail Assessment to be submitted via
 TAFE Queensland Learning Management System: Connect url: ht-
tps://connect.tafeqld.edu.au/d2l/login
 Username; 10 digit student number
 For Password: Reset password go to https://passwordre-
set.tafeqld.edu.au/default.aspx>

SPECIFIC TASK INSTRUCTIONS

In the sections below, are the details of the report, major assignment, workplan, reflection, portfolio or
other items this assessment task requires, as well as the criteria for satisfactory completion.

SCENARIO
Please refer to IRTx_ Scenario-1.docx on Connect under supplementary assessment.
674752105.docx Page 2 of
 Part 1:
This is a report that is in two sections:
Section 1: Project Management Team Performance
This is a brief section that:
• Reviews the team’s performance against the objective of developing an Incident Response
Team Exercise

• Validate the team objectives against the project targets

• Proposes changes/improvements to the project development process

• Recognises the achievements of individual team members Section 2: Project Management

Closure This section contains the following:

• Project timeframes, scope, quality expectations are evaluated against actual

• Project risk strategy is reviewed, and improvements recommended

• Final project signoff is obtained Marking Criteria

• Format and presentation of report is consistent with other reports

• Reviews performance against a minimum of 3 objectives

• Validates a minimum of 3 targets

• Proposes a minimum of 3 changes/improvements

• Shows the difference between when tasks were planned to be completed against when
they were actually completed using a graph or other visualisation

• Outlines a minimum of 3 improvements for risk mitigation strategy improvements

• A project signoff checklist for the project sponsor (teacher) to sign.

Part 2: Evaluate the IRTx

This task is about evaluating the effectiveness of the exercise. It will require all teams to meet and
discuss the IRTx.
Each team is to host a round table discussion with the other teams involved in the IRTx. This
discussion is to cover the following topic:

1. What improvements can be made to the incident response plan

2. How well did the blue team strategy work in identifying events/incidents

3. Effectiveness of using the IRTx as a method of evaluating and testing the IRP

674752105.docx Page 3 of
 4. How effective was the communication between the cyber analyst and SOC shift supervisor

5. How effective was the communication between the SOC shift supervisor and the SOC man-
ager

6. Any other feedback to improve the IRTx

From the round table discussion, each team is to write an Exercise Closure report using the
feedback from the round table discussion on your team’s IRTx Marking Criteria

• Report is not to be more than 5 pages

• Report is to have the following headings:

o Overview
Provide a brief overview of the purpose of the exercise and a summary of results o

Review of effectiveness of Incident/Event Identification Strategy

 Blue team strategy is outlined

 Incident/event identification results summarised

 Effectiveness of strategy reviewed

 Review is to be consistent with observer team report o Review of effectiveness of

communications between team roles

 The review of the communications between blue team members during the exer-
cise is summarised

 Review to be consistent with observer team report o Lessons Learnt

 What went right

Minimum of 3 actions that the team did right in the context of the exercise
 What went wrong
Minimum of 3 issues/problems, or actions that did not go as planned. 

Recommended improvements

• Minimum of 3 recommendation to improve the effectiveness of the IRTx are listed and de-
scribed

o Appendix

 Observer team report

• All team members have input into the report o Contribution of each
team member is referenced in appendix
674752105.docx Page 4 of
 Part 3: Prepare Presentation
The team is to prepare the presentation outlines the lessons learnt, and experiences gained
from developing and implementing the project plan.
The presentation is to be a team presentation and is to contain the following sections:
1. Welcome and explanation of goals/objective of the presentation (Why are we here?) 2.

Overview of the project plan

3. Lesson learnt – each team member to present their own

4. Summary of what the team learnt and what they felt they could improve on.

5. Final wrap-up and thank you

The team is to prepare and submit a presentation plan that:
• Identifies the audience and clarifies the purpose of the presentation
• Outlines the structure and sequence of the presentation
• Identifies the media sources such as images, graphs, videos, as well as presentation tem-
plate to be used. Marking Criteria

• The presentation plan is to be no more than 2 pages

• Presentation is to be no more than 15 minutes in length

• Each team member is to present their own lesson learnt section plus at least 1 other sec-
tion of the presentation

• Each team member used the same template, slide structure, format

• Provides a brief overview of the project

• Each team member to outline 2 good experiences and 2 non-favourable experiences

• Each team member to present 2 lessons learnt from the project

Task 4: Present Presentation

For this task the team members are to present the presentation as prepared.
Marking Criteria
• Each team member presented lessons learnt and 1 other section

• Presenter used appropriate language

• Presentation material was appropriate for purpose
• Team members answered questions in an appropriate manner
• Presentation duration was 15 minutes (between 12 – 20 minutes is acceptable)

674752105.docx Page 5 of
 • Presentation was structured and organised

674752105.docx Page 6 of