CRITERIA
A: Excellent (>= 80 %) B: Very good (70 79%) C: Good (60 69%) D: Acceptable (50 59%) N: Unacceptable (<50%)
Accurately describe the scope and focus of the risk assessment task, as derived from the given scenario
(10 marks) Provides an accurate and detailed description of the scope and focus of the risk assessment task.
(810 marks) Provides a clear and detailed description of the scope and focus of the risk assessment task.
(7 marks) Provides an appropriate description of the scope and focus of the risk assessment task.
(6 marks) Provides a description of the scope and focus of the risk assessment task, but it is missing key details.
(5 marks) A description of the scope and focus of the risk assessment task was not provided.
(<5 marks)
Accurately describe a viewpoint of the business or organisation for the target and purpose of the risk assessment task
(10 marks) Provides an accurate description of a viewpoint of the business or organisation for the target and purpose of the risk assessment task.
(810 marks) Provides a clear description of a viewpoint of the business or organisation for the target and purpose of the risk assessment task.
(7 marks) Provides an appropriate description of a viewpoint of the business or organisation for the target and purpose of the risk assessment task.
(6 marks) Provides a description of a viewpoint of the business or organisation for the target and purpose of the risk assessment task, but it is missing key details.
(5 marks) A description of a viewpoint of the business or organisation for the target and purpose of the risk assessment task was not provided.
(<5 marks)
Create an accurate CORAS asset diagram and akso describe a high-level analysis of a list of unwanted incidents, threats, vulnerabilities and threat scenarios
(30 marks) Provides an accurate CORAS asset diagram that provides a clear analysis of identified threat scenarios, including all relevant unwanted incidents, threats and vulnerabilities.
(2430 marks) Provides a clear CORAS asset diagram that provides a clear analysis of identified threat scenarios, including all relevant unwanted incidents, threats and vulnerabilities.
(2123 marks) Provides an appropriate CORAS asset diagram that provides an analysis of identified threat scenarios, including all relevant unwanted incidents, threats and vulnerabilities.
(1820 marks) Provides a CORAS asset diagram that provides an analysis of identified threat scenarios, including relevant unwanted incidents, threats and vulnerabilities, but it is missing key details.
(1517 marks) A CORAS asset diagram was not provided.
(<15 marks)
Create an accurate CORAS threat diagram that describes, identifies and estimates threats
(30 marks) Provides an accurate CORAS threat diagram with a clear analysis of identified and relevant unwanted, threats, vulnerabilities and threat incidents, threats, vulnerabilities and threat scenarios.
(2430 marks) Provides a clear CORAS threat diagram with a clear analysis of identified and relevant unwanted, threats, vulnerabilities and threat incidents, threats, vulnerabilities and threat scenarios.
(2123 marks) Provides an appropriate CORAS threat diagram with an analysis of identified and relevant unwanted incidents, threats, vulnerabilities and threat threats, vulnerabilities and threat scenarios.
(1820 marks) Provides a CORAS threat diagram with an analysis of identified and relevant unwanted incidents, threats, vulnerabilities and threat scenarios, but it is missing key details.
(1517 marks) A CORAS threat diagram was not provided.
(<15 marks)
Based on the Asset and Threat diagrams create a treatment diagram by analysing the acceptable and unacceptable risks and proper treatment controls Provides an accurate CORAS Risk Treatment diagram with relevant treatment controls applied and a Risk treatment overview diagram (which simplifies the risks based on analysis)
(2430 marks) Provides an accurate CORAS Risk Treatment diagram with relevant treatment controls applied.
(2123 marks) Provides an appropriate CORAS treatment diagram with relevant treatment controls.
(1820 marks) Provides a CORAS treatment diagram.
(1517 marks) A CORAS treatment diagram was not provided.
(1517 marks