商业信息安全防护

默认只展示每周独有的知识重点；节奏、考核、Tutorial 和避坑信息按需展开。

1. 1

   Introduction to Information Security We introduce the concept of information security and the fundamental view we shall

   ### 📖 核心知识点：Introduction to Information Security We introduce the concept of information security and the fundamental view we shall use to analyse this topic. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Introduction to Information Security We introduce the concept of information security and the fundamental view we shall use to analyse this topic., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Introduction to Information Security We introduce the concept of information security and the fundamental view we shall use to analyse this topic.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   IntroductiontoInformationSecurityWeintroducetheconceptofinformation
2. 2

   The Need for Security / Legal and Ethical Issues We discuss the need for information security - types of security threat

   ### 📖 核心知识点：The Need for Security / Legal and Ethical Issues We discuss the need for information security - types of security threats. We introduce a range of Australian IT related laws and the advantages/disadvantages these pose. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: The Need for Security / Legal and Ethical Issues We discuss the need for information security - types of security threats. We introduce a range of Australian IT related laws and the advantages/disadvantages these pose., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“The Need for Security / Legal and Ethical Issues We discuss the need for information security - types of security threats. We introduce a range of Australian IT related laws and the advantages/disadvantages these pose.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   TheNeedforSecurity/LegalandEthicalIssuesWe
3. 3

   Planning for Security We discuss management's role in the development, maintenance, and enforcement of information secur

   ### 📖 核心知识点：Planning for Security We discuss management's role in the development, maintenance, and enforcement of information security policy and standards. We explain what an information security blueprint is in the context of the ISO 27000 series. We introduce contingency planning. Due to the EKKA public holiday, the Wednesday seminar session will not be held this week. Make-up arrangements will be made. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Planning for Security We discuss management's role in the development, maintenance, and enforcement of information security policy and standards. We explain what an information security blueprint is in the context of the ISO 27000 series. We introduce contingency planning. Due to the EKKA public holiday, the Wednesday seminar session will not be held this week. Make-up arrangements will be made., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Planning for Security We discuss management's role in the development, maintenance, and enforcement of information security policy and standards. We explain what an information security blueprint is in the context of the ISO 27000 series. We introduce contingency planning. Due to the EKKA public holiday, the Wednesday seminar session will not be held this week. Make-up arrangements will be made.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   PlanningforSecurityWediscussmanagement'sroleinthedevelopment
4. 4

   Risk Management (Part 1) In the first part, we focus on defining risk management and its role in the organisation. We de

   ### 📖 核心知识点：Risk Management (Part 1) In the first part, we focus on defining risk management and its role in the organisation. We describe risk management techniques to identify and prioritise risk factors for assets. We explain how risk is assessed. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Risk Management (Part 1) In the first part, we focus on defining risk management and its role in the organisation. We describe risk management techniques to identify and prioritise risk factors for assets. We explain how risk is assessed., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Risk Management (Part 1) In the first part, we focus on defining risk management and its role in the organisation. We describe risk management techniques to identify and prioritise risk factors for assets. We explain how risk is assessed.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   RiskManagementPart1Inthefirstpartwefocus
5. 5

   Risk Management (Part 2) In the second part, we discuss strategy options used to treat risk. We formulate a cost-benefit

   ### 📖 核心知识点：Risk Management (Part 2) In the second part, we discuss strategy options used to treat risk. We formulate a cost-benefit analysis (CBA) using existing conceptual frameworks. We describe popular methodologies used in business to manage risk. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Risk Management (Part 2) In the second part, we discuss strategy options used to treat risk. We formulate a cost-benefit analysis (CBA) using existing conceptual frameworks. We describe popular methodologies used in business to manage risk., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Risk Management (Part 2) In the second part, we discuss strategy options used to treat risk. We formulate a cost-benefit analysis (CBA) using existing conceptual frameworks. We describe popular methodologies used in business to manage risk.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   RiskManagementPart2Inthesecondpartwediscuss
6. 6

   Cryptography (Part 1) We consider two major encryption paradigms - symmetric key and public key cryptography - their ope

   ### 📖 核心知识点：Cryptography (Part 1) We consider two major encryption paradigms - symmetric key and public key cryptography - their operational strengths and challenges. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Cryptography (Part 1) We consider two major encryption paradigms - symmetric key and public key cryptography - their operational strengths and challenges., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Cryptography (Part 1) We consider two major encryption paradigms - symmetric key and public key cryptography - their operational strengths and challenges.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   CryptographyPart1Weconsidertwomajorencryptionparadigms-
7. 7

   Cryptography (Part 2) We consider the commercial applications of cryptography - hybrid security applications for the Web

   ### 📖 核心知识点：Cryptography (Part 2) We consider the commercial applications of cryptography - hybrid security applications for the Web and Email. We also consider other important applications such as digital signaturing. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Cryptography (Part 2) We consider the commercial applications of cryptography - hybrid security applications for the Web and Email. We also consider other important applications such as digital signaturing., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Cryptography (Part 2) We consider the commercial applications of cryptography - hybrid security applications for the Web and Email. We also consider other important applications such as digital signaturing.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   CryptographyPart2Weconsiderthecommercialapplicationsofcryptography
8. 8

   Security Technology (Firewalls, Proxys and the DMZ - Part 1) A business analysis of major types of security controls - o

   ### 📖 核心知识点：Security Technology (Firewalls, Proxys and the DMZ - Part 1) A business analysis of major types of security controls - operational approaches and positioning within the business network. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Security Technology (Firewalls, Proxys and the DMZ - Part 1) A business analysis of major types of security controls - operational approaches and positioning within the business network., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Security Technology (Firewalls, Proxys and the DMZ - Part 1) A business analysis of major types of security controls - operational approaches and positioning within the business network.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

   SecurityTechnologyFirewallsProxysandtheDMZ-Part1
9. 9

   Security Technology (Intrusion Detection - Part 2) Consideration of the role of intrusion detection systems - placement

   ### 📖 核心知识点：Security Technology (Intrusion Detection - Part 2) Consideration of the role of intrusion detection systems - placement and operational approaches. We analyse how intrusion detection systems (IDS) provide 'defence in depth' for the modern business. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Security Technology (Intrusion Detection - Part 2) Consideration of the role of intrusion detection systems - placement and operational approaches. We analyse how intrusion detection systems (IDS) provide 'defence in depth' for the modern business., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Security Technology (Intrusion Detection - Part 2) Consideration of the role of intrusion detection systems - placement and operational approaches. We analyse how intrusion detection systems (IDS) provide 'defence in depth' for the modern business.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 只写组件清单，不写故障场景与容量取舍。 (BISM7213)）

   SecurityTechnologyIntrusionDetection-Part2Considerationofthe
10. 10

    PCI DSS Discussion & Analysis A 'capstone' analysis of the Payment Card Industry Data Security Standard (PCI DSS). A con

    ### 📖 核心知识点：PCI DSS Discussion & Analysis A 'capstone' analysis of the Payment Card Industry Data Security Standard (PCI DSS). A contractually obligatory standard for any business storing, forwarding or processing in-house credit card data for Visa, Mastercard, and Amex. Due to the King's Birthday public holiday, the Monday seminar session will not be held this week. Make-up arrangements will be made. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: PCI DSS Discussion & Analysis A 'capstone' analysis of the Payment Card Industry Data Security Standard (PCI DSS). A contractually obligatory standard for any business storing, forwarding or processing in-house credit card data for Visa, Mastercard, and Amex. Due to the King's Birthday public holiday, the Monday seminar session will not be held this week. Make-up arrangements will be made., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“PCI DSS Discussion & Analysis A 'capstone' analysis of the Payment Card Industry Data Security Standard (PCI DSS). A contractually obligatory standard for any business storing, forwarding or processing in-house credit card data for Visa, Mastercard, and Amex. Due to the King's Birthday public holiday, the Monday seminar session will not be held this week. Make-up arrangements will be made.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

    PCIDSSDiscussion&AnalysisA'capstone'analysisofthe
11. 11

    Blockchain - Theory & Practice We analyse the blockchain application. Discussion of the blockchain as it underpins bitco

    ### 📖 核心知识点：Blockchain - Theory & Practice We analyse the blockchain application. Discussion of the blockchain as it underpins bitcoin (crypto-currency). We focus on its architecture, benefits, challenges, and how it implements hashing and cryptography. A business analysis of the variety of blockchain management paradigms that have emerged in business. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Blockchain - Theory & Practice We analyse the blockchain application. Discussion of the blockchain as it underpins bitcoin (crypto-currency). We focus on its architecture, benefits, challenges, and how it implements hashing and cryptography. A business analysis of the variety of blockchain management paradigms that have emerged in business., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Blockchain - Theory & Practice We analyse the blockchain application. Discussion of the blockchain as it underpins bitcoin (crypto-currency). We focus on its architecture, benefits, challenges, and how it implements hashing and cryptography. A business analysis of the variety of blockchain management paradigms that have emerged in business.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 只写组件清单，不写故障场景与容量取舍。 (BISM7213)）

    Blockchain-Theory&PracticeWeanalysetheblockchainapplication.
12. 12

    Security Maintenance We focus on security auditing and security testing as part of managing and operating the ongoing se

    ### 📖 核心知识点：Security Maintenance We focus on security auditing and security testing as part of managing and operating the ongoing security program. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Security Maintenance We focus on security auditing and security testing as part of managing and operating the ongoing security program., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Security Maintenance We focus on security auditing and security testing as part of managing and operating the ongoing security program.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

    SecurityMaintenanceWefocusonsecurityauditingandtesting
13. 13

    Recap & Get Ready for the Exam We review the series of seminars. Q&A session for exam.

    ### 📖 核心知识点：Recap & Get Ready for the Exam We review the series of seminars. Q&A session for exam. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Recap & Get Ready for the Exam We review the series of seminars. Q&A session for exam., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Recap & Get Ready for the Exam We review the series of seminars. Q&A session for exam.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7213)）

    Recap&GetReadyfortheExamWereview