Cyber Security Governance & Risk

Michael is working on a research project. Is it acceptable for him to upload research data with sensitive/highly sensitive data to ChatGTP?

• Yes

• No

• I don’t know

Oliver needs to access the Cyber Security Policies and Standards for his project. Where can he find them?

• Logging into https://www.myit.unsw.edu.au/cyber-security/policies-and-standards

• Searching the keyword “cyber” on https://www.unsw.edu.au/governance/policy

• Logging into cybergovemance.unsw.edu.au and accessing searchable policy directory, CyberPolicyHub tab.

Henry is concerned about the security of his company's supply chain. Supply chain security breaches are in the news almost daily. Which service can he use to receive a free security risk profile of suppliers of technology services?

• Engage the vendor and commercial team

• MyCyberHub (cybergovernance.unsw.edu.au)

• ChatGPT

If Emma is a Business Owner and she signs-off on a cyber security risk. What does it mean?

• She accepts the risk and does nothing

• She acknowledges the risk, agrees to a risk mitigation plan, actions and due dates

• She transfers the risk to a third party

Hannah's application vendor has released a new AI feature free of cost. She should:

• Access AI@UNSW | UNSW IT | UNSW Sydney to understand her compliance obligations

• Submit a General Advisory request on MyCyberHub (cybergovernance.unsw.edu.au) to get advice

• Submit a Cyber Security Risk Assessment on MyCyberHub (cybergovernance.unsw.edu.au)