Skip to Main Content
Catalogue Link
<a href="/ords/r/curriculum/catalogue/home" class="t-Header-logo-link"><span class="apex-logo-text">Handbook</span></a>
Hidden Page Items
New
8
New
HE Unit Template
New
Cybersecurity Governance, Risk and Compliance
New
ITECH2506 - Cybersecurity Governance, Risk and Compliance
New
20270200
New
New
New
New
Course
New
Unit
New
New
2.0
New
New
2026-09-10
New
2026-09-10
New
Information Technology
New
New
New
New
Institute of Innovation, Science & Sustainability
New
Information Technology
New
Undergraduate
New
15
New
New
.125
New
029999
New
Information Technology, n.e.c.
New
029999 - Information Technology, n.e.c.
New
<a href="http://www.federation.edu.au/locate/unit/itech2506">View unit fees</a>
New
Graded (e.g. HD, D, C, etc)
New
6
New
Advanced Diploma, Associate Degree
New
New
New
New
New
1
New
New
New
New
New
false
New
New
New
<p>Cybersecurity Governance, Risk, and Compliance (GRC) are essential components of any organisation's approach to managing its digital security posture. In this unit, these components will be covered in detail. In the governance part, students will learn about frameworks, policies, procedures, and processes that guide the overall management of cybersecurity within an organisation, e.g., establishing roles and responsibilities, defining goals and objectives, and ensuring that cybersecurity efforts align with the organisation's strategic objectives. The risk management part will cover aspects like identifying, assessing, and prioritising potential cybersecurity threats and vulnerabilities that could affect the organisation, such as ongoing monitoring, evaluation, and adjustment of security measures to address evolving threats and changes in the business environment. Finally, the compliance part will cover relevant laws, regulations, standards, and industry best practices related to cybersecurity, such as data protection regulations, industry-specific standards, and internal policies and procedures.</p>
New
New
<p>Topics may include:</p><p>1. GRC Foundations and Governance Frameworks</p><p>2. Information Security Policy and Organisational Governance</p><p>3. AI Governance and Emerging Technology Risk</p><p>4. Cybersecurity Risk Assessment and Management</p><p>5. Risk Treatment and Control Mapping</p><p>6. Risk Monitoring and Key Risk Indicators</p><p>7. Regulatory Compliance and Obligations Mapping</p><p>8. Industry Standards, Regulations, Frameworks, and Best Practices Gap Analysis and Audit</p><p>9. Compliance Reporting and Remediation</p><p>10. GRC Programme Integration </p>
New
true
New
<p>Where supplementary assessment is available a student must have failed overall in the Unit but gained a final mark of 45 per cent or above, has completed all major assessment tasks (including all sub-components where a task has multiple parts) as specified in the Unit Description and is not eligible for any other form of supplementary assessment.</p>
New
true
Hidden Page Items
Semester
Semester
0200
Year
Year
2027
Current Year
2026
Breadcrumb Positioning
Handbook
ITECH2506 - Cybersecurity Governance, Risk and Compliance
Pseudo Breadcrumb
ITECH2506 - Cybersecurity Governance, Risk and Compliance
Breadcrumb Type
Unit
Catalogue Term and Year
Version Text
You are viewing a version for
Semester
Semester 1
Semester 2
Summer Semester
Year
2027
2026
Download PDF
RDS Holder
Overview
Key information
Requisites
Learning outcomes
Assessment
FedTASK
Parent Region
Overview
Unit description
<p>Cybersecurity Governance, Risk, and Compliance (GRC) are essential components of any organisation's approach to managing its digital security posture. In this unit, these components will be covered in detail. In the governance part, students will learn about frameworks, policies, procedures, and processes that guide the overall management of cybersecurity within an organisation, e.g., establishing roles and responsibilities, defining goals and objectives, and ensuring that cybersecurity efforts align with the organisation's strategic objectives. The risk management part will cover aspects like identifying, assessing, and prioritising potential cybersecurity threats and vulnerabilities that could affect the organisation, such as ongoing monitoring, evaluation, and adjustment of security measures to address evolving threats and changes in the business environment. Finally, the compliance part will cover relevant laws, regulations, standards, and industry best practices related to cybersecurity, such as data protection regulations, industry-specific standards, and internal policies and procedures.</p>
Unit content
<p>Topics may include:</p><p>1. GRC Foundations and Governance Frameworks</p><p>2. Information Security Policy and Organisational Governance</p><p>3. AI Governance and Emerging Technology Risk</p><p>4. Cybersecurity Risk Assessment and Management</p><p>5. Risk Treatment and Control Mapping</p><p>6. Risk Monitoring and Key Risk Indicators</p><p>7. Regulatory Compliance and Obligations Mapping</p><p>8. Industry Standards, Regulations, Frameworks, and Best Practices Gap Analysis and Audit</p><p>9. Compliance Reporting and Remediation</p><p>10. GRC Programme Integration </p>
Key information
Institute / school:
Institute of Innovation, Science & Sustainability
Discipline:
Information Technology
Study level:
Undergraduate
Credit points:
15
EFTSL:
0.125
Field of education:
029999 - Information Technology, n.e.c.
Offering:
<p><strong>Semester 1</strong><p>Ballarat - Mt Helen (On Campus)</p><p>Berwick (On Campus)</p><p>On-line Learning</p></p>
Grade scheme:
Graded (e.g. HD, D, C, etc)
Placement component:
No
Fee information:
<a href="http://www.federation.edu.au/locate/unit/itech2506">View unit fees</a>
Requisites
Prerequisite
<p>must have completed "<a href="/ords/r/curriculum/catalogue/course?p6_code=ITECH1502" target="_blank">ITECH1502</a>"</p>
Corequisite
None
Exclusion
None
Learning outcomes
Learning outcomes
<p>On successful completion of this unit, students are expected to gain the following [K]nowledge, [S]kills and [A]pplication of knowledge & skills</p>
Learning Outcomes
Ref
Outcome
1
<p>Explain governance frameworks, principles, and their role in aligning cybersecurity with organisational strategy.</p>
2
<p>Assess and prioritise cybersecurity risks using recognised methodologies and propose mitigation strategies.</p>
3
<p>Interpret and apply relevant laws, regulations, and industry standards to ensure organisational compliance.</p>
4
<p>Integrate GRC practices into organisational processes and policies to support strategic objectives.</p>
5
<p>Evaluate and recommend improvements for continuous monitoring and enhancement of GRC programs.</p>
Assessment
Learning Tasks and Assessment
Ref
Learning task
Assessment type
Weighting
Learning outcomes assessed
1
<p>Students act as cybersecurity governance consultants engaged to review a realistic organisational case study and provide practical solutions to a range of problems.</p>
<p>GRC Risk Analysis and Compliance Investigation</p>
<p>30 - 35%</p>
1, 2, 3
2
<p>Students develop a cybersecurity governance, risk and compliance improvement strategy for a simulated organisation.</p>
<p>Organisational GRC Improvement Project</p>
<p>35 - 45%</p>
1, 3, 4, 5
3
<p>Students individually respond to an unseen cybersecurity governance and compliance scenario identifying governance issues, assess risks, explain compliance obligations, recommend mitigation approaches, and defend decisions.</p>
<p>Professional Validation Interview / Scenario Defence</p>
<p>10 - 30%</p>
1, 2, 3, 4, 5
Supplementary assessment available:
Yes
Supplementary assessment information:
<p>Where supplementary assessment is available a student must have failed overall in the Unit but gained a final mark of 45 per cent or above, has completed all major assessment tasks (including all sub-components where a task has multiple parts) as specified in the Unit Description and is not eligible for any other form of supplementary assessment.</p>
FedTASK
FedTASK
Description of FedTASK outcome
Level
FedTASK 1: Interpersonal
The ability to effectively communicate, interact and work with others both individually and in groups.
<p>Level 1 - Students require directions and boundaries from mentor</p>
FedTASK 2: Leadership
The ability to apply professional skills and behaviours in leading others.
FedTASK 3: Critical Thinking and Creativity
The ability to work in complexity and ambiguity using imagination to create new ideas.
<p>Level 2 - Student demonstrates some independence within provided guidelines</p>
FedTASK 4: Digital Literacy
The ability to work fluently across a range of tools and applications to achieve a range of skills.
<p>Level 2 - Student demonstrates some independence within provided guidelines</p>
FedTASK 5: Sustainable and Ethical Mindset
The ability to consider and assess the consequences and impact of ideas and actions in enacting ethical and sustainable decisions.
<p>Level 2 - Student demonstrates some independence within provided guidelines</p>
FedTASK
<p>Federation University recognises that students require key transferable employability skills to prepare them for their future workplace and society. FedTASKs (<strong>T</strong>ransferable <strong>A</strong>ttributes <strong>S</strong>kills and <strong>K</strong>nowledge) provide a targeted focus on five key, transferable Attributes, Skills, and Knowledge that are embedded within curriculum, developed gradually towards successful measures and interlinked with cross-discipline and co-operative learning opportunities.</p>
Key information
Institute / school:
Institute of Innovation, Science & Sustainability
Discipline:
Information Technology
Study level:
Undergraduate
Credit points:
15
EFTSL:
0.125
Field of education:
029999 - Information Technology, n.e.c.
Offering:
<p><strong>Semester 1</strong><p>Ballarat - Mt Helen (On Campus)</p><p>Berwick (On Campus)</p><p>On-line Learning</p></p>
Grade scheme:
Graded (e.g. HD, D, C, etc)
Placement component:
No
Fee information:
<a href="http://www.federation.edu.au/locate/unit/itech2506">View unit fees</a>
Additional information
Add Info Static Text
Internal reference: ITECH2506 - U2.0