Learning Outcomes covered in this Assignment 

Learning Outcomes covered in this Assignment
Identify, articulate and discuss the issues associated with legal and human aspects of Cyber Security.
Evaluate and apply legal provisions and experimental methods to cyber security.
Portfolio
Word count:  Part A: 3,000 words / Part B: 1,000 words

Content
You are the newly appointed Chief Information Security Officer and you are currently reviewing the applicability of GDPR and other relevant cyber security legislation to end users within your organisation. Your task is to create a portfolio consisting of the following parts:
Key: Pick a legislation and how it affects your employees. (DATA Protection, COMPTUER CRIME, INTERLECTUAL PROPERTY)
End user compliance to legislation: Write a report discussing the applicability of cyber security legislation to your employees, and consequently the actions they would need to take to ensure compliance. Your recommendations should also consider human aspects of security (3,000 words, excluding references and appendices).
Awareness raising strategy: Based on the findings of the previous stage, write a report on the design of an awareness raising strategy for your employees, in order to communicate the actions they would need to take to ensure compliance. Your strategy would also need to consider the effectiveness of your awareness raising campaign. (1,000 words, excluding references and appendices)

The assignment task covers the following steps:

Part A – End user compliance to legislation Report
Introduce the need for cyber security legislation and identify the cyber security legislation relevant to your organisation.
Analyse how such legislation could apply to your employees.
Discuss the applicability of cyber security legislation to employees, considering human aspects of security.
Draw conclusions based on the findings from Step 3, suggesting actions employees would need to take to ensure compliance.
Write a report presenting your findings. You are expected to correctly reference and cite all source materials in your report. Please use Harvard referencing style.

Part B – Awareness Raising strategy report
Based on the actions you identified in part A, identify important key messages that would need to be communicated to employees, in order to ensure compliance. Consider human aspects of security in your design.
Design an awareness raising strategy to reinforce these messages, as well as an experiment to investigate the effectiveness of your initiative. Consider the research question, suitable research methods, independent and dependent variables, and how you would come up with a conclusive decision out of your experiment.
Write a brief report detailing the results of your investigation. You are expected to correctly reference and cite all source materials in your report. Please use Harvard referencing style.
Further Resources:
There is a wide selection of online literature sources on cyber security legislation and human aspects of security. Below is a small selection of relevant resources to consider for this assignment task.
Hildebrandt, M. (2020) Law for Computer Scientists and Other Folk (Oxford University Press: Oxford), Chapter 5
ICO. (2020) Guide to the UK General Data Protection Regulation (UK GDPR). [online] Available at: <https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/> [Accessed January 2022].
ICO. (2020) About the DPA 2018. [online] Available at: < https://ico.org.uk/for-organisations/guide-to-data-protection/introduction-to-data-protection/about-the-dpa-2018/> [Accessed January 2022].
EU Commission. (2020) Data protection in the EU. [online] Available at: < https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en> [Accessed January 2022].