Model laws on electronic commerce are investigated 2. Defining Australian 2.1 Law Conventions on the use of electronic communications are 2.2 defined Relevant international cybercrime conventions are investigated 2.3 Repercussions of the international General Data Protection 2.4 Regulation (GDPR) and its adoption in Australia is investigated Key Acts defining Law in Australia are defined 2.5 Categories of information that the law affords protection as they 3. Identify mandatory 3.1 pertain to security for the organisation are identified and discretionary cyber laws and Legal resources pertaining to Cyber Law are identified 3.2 practices Relevant laws for particular industry sectors are identified and 3.3 collated Difference between State and federal legislation for relevant laws 3.4 pertaining to cyber security are identified Mandatory and discretionary outcomes of current Commonwealth 3.5 Acts as they pertain to cyber security for the organisation are identified Mandatory and discretionary outcomes of current State based Acts 3.6 as they pertain to cyber security for the organisation are identified Codes pertinent to the organisation’s industry sector are identified 3.7 Frameworks pertinent to the organisation’s industry sector are 3.8 identified Voluntary codes and best practices for the industry sector 3.9 aligned to the organisation are identified Methodology of utilising resources relevant to cyber law for the 4. Evaluate and select 4.1 organisation is defined and demonstrated relevant Australian regulation and Mandatory regulations, standards, codes and frameworks pertaining 4.2 practices pertaining to cyber security for the organisation are evaluated and selected to security of the Discretionary standards, codes and frameworks pertaining to cyber organisation 4.3 security for the organisation are evaluated and selected Voluntary codes and best practice for the industry sector aligned to 4.4 the organisation are evaluated and selected Strategies to implement mandatory regulations, standards, and 5. Implement relevant 5.1 frameworks for the organisation are developed Australian regulation and practices Strategies to implement discretionary standards, codes and 5.2 pertaining to security frameworks for the organisation are developed of the organisation Strategies to implement voluntary codes and best practice guidelines 5.3 and organisational practices for the organisation are developed Organisational changes to appropriate groups within the organisation 5.4 are articulated
2. Defining Australian Law 2.1 Model laws on electronic commerce are investigated 2.2 Conventions on the use of electronic communications are defined 2.3 Relevant international cybercrime conventions are investigated 2.4 Repercussions of the international General Data Protection Regulation (GDPR) and its adoption in Australia is investigated 2.5 Key Acts defining Law in Australia are defined 3. Identify mandatory and discretionary cyber laws and practices 3.1 Categories of information that the law affords protection as they pertain to security for the organisation are identified 3.2 Legal resources pertaining to Cyber Law are identified 3.3 Relevant laws for particular industry sectors are identified and collated 3.4 Difference between State and federal legislation for relevant laws pertaining to cyber security are identified 3.5 Mandatory and discretionary outcomes of current Commonwealth Acts as they pertain to cyber security for the organisation are identified 3.6 Mandatory and discretionary outcomes of current State based Acts as they pertain to cyber security for the organisation are identified 3.7 Codes pertinent to the organisation’s industry sector are identified 3.8 Frameworks pertinent to the organisation’s industry sector are identified 3.9 Voluntary codes and best practices for the industry sector aligned to the organisation are identified 4. Evaluate and select relevant Australian regulation and practices pertaining to security of the organisation 4.1 Methodology of utilising resources relevant to cyber law for the organisation is defined and demonstrated 4.2 Mandatory regulations, standards, codes and frameworks pertaining to cyber security for the organisation are evaluated and selected 4.3 Discretionary standards, codes and frameworks pertaining to cyber security for the organisation are evaluated and selected 4.4 Voluntary codes and best practice for the industry sector aligned to the organisation are evaluated and selected 5. Implement relevant Australian regulation and practices pertaining to security of the organisation 5.1 Strategies to implement mandatory regulations, standards, and frameworks for the organisation are developed 5.2 Strategies to implement discretionary standards, codes and frameworks for the organisation are developed 5.3 Strategies to implement voluntary codes and best practice guidelines and organisational practices for the organisation are developed 5.4 Organisational changes to appropriate groups within the organisation are articulated