The purpose of this assessment is for you to develop your strategic communication and incident response skills by simulating a briefing between a Chief Information Security Officer (CISO) and a Chief Executive Officer (CEO) in the wake of a critical cybersecurity breach.

You will take on the role of the CISO, briefing the CEO on a cybersecurity attack that has impacted the organisation. Your discussion should cover the motives and methods behind the attack, the application of appropriate cybersecurity frameworks to identify and address vulnerabilities, an evaluation of the organisation's incident response against industry best practices, the roles of key business functions in preventing and responding to the breach, and the emerging cybersecurity threats the organisation should prepare for going forward.

To help the CEO (which will be your tutor) prepare for the discussion, you will submit a written briefing report in advance. This report is not assessed but is intended to ensure a productive and informed conversation during the observed discussion.

Skills in focus:

Communication skills
Work readiness
Critical thinking and problem solving
Discipline knowledge

Deliverable(s): A 5–10 minute observed CISO–CEO discussion conducted during your tutorial session. A written briefing report may be submitted in advance to support the discussion; this report is not assessed.

Individual assessment