Legal and Ethical Issues in IT Security
Assignment #1
STUDENT INSTRUCTIONS
Submission
Instructions
Value
Due Date
To be submitted via Blackboard. Refer to Blackboard for submission
instructions
12% of final grade
Refer to course timeline posted on Blackboard for specific due date
Learning Outcomes Covered in Assignment
1. Analyze and discuss issues surrounding privacy, privacy law, threats to privacy, and general
principles for privacy protection.
2. Evaluate the current state of cyber security and how security, privacy and compliance fit into
the Canadian, American, and European legal systems.
3. Discuss risk analysis, incident response, contingency planning, computer forensics and forensic
investigations.
Assignment
You are to identify a cybersecurity breach event that occurred over the past 5 years (since January
2013) and that was reported in the media.
The objective of the assignment will be to understand an example of how a cybersecurity incident
occurs and what impact(s) it can have on the organizations.
The cybersecurity breach event you select can be in any industry and in any part of the world.
Research should be done online.
If you are having trouble finding information on the cybersecurity breach event you selected, find
another example.
Evaluation:
Please see the Rubric on the next page for Evaluation Criteria.
Submission:
Your report should contain the six (6) sections noted below:
• Title page
• Introduction
• Summary of the incident
• Impact(s) on the organization
• Conclusion
• Information Sources
Title Page
Your name, course, section, date, the professor’s name, the name of the company.
Introduction (1 to 2 paragraphs)
A brief description and background of the organization you have selected and why.
Summary of the Incident (2 pages)
Provide a chronological overview of the cybersecurity breach incident. Explain what occurred, the
type of cybersecurity incident, what data was stolen and what steps the organization took.
Impact(s) on the Organization (1 page)
Provide a summary of how the cybersecurity breach incident affected the organization (e.g., financial
impact, reputational cost, litigation, etc.).
Conclusion (2 to 3 paragraphs)
A brief overview of the key takeaways.
Information Sources
Note and provide links to any websites used in your research.
Submitted Document
Your report must be double-spaced in 12pt font with one-inch margin. The report will be submitted
online and should be either in MS Word or pdf file format.
The report type is to follow MLA format.
Note: Please proofread to ensure that all words, including names and technical terms are spelled
correctly.
Plagiarism:
Plagiarized assignments will receive a mark of zero on the assignment and a failing grade on the
course. You may also receive a permanent note of plagiarism on your academic record. Please note:
even if you use work you previously wrote yourself, it is still considered plagiarism if you do no cite it
property in your paper.
Assignment Rubric
Criteria
Title page: Contains name, course section,
date, professor name
Introduction: Description and background of the
Points
5
10
organization selected and why.
Summary of incident: Detailed overview of
the cybersecurity breach incident. Explain what
occurred, the type of cybersecurity incident,
30
what data was stolen and what steps the
organization took.
Impact on the organization: Summary of how
the cybersecurity breach incident affected the
organization (e.g., financial impact, reputational
cost, litigation, etc.).
Conclusion
Information Sources
Total
30
10
15
100