LO1: Explore the fundamentals of common legislation and standards applicable to cyber security

Assignment Brief 

Programme title & Number

NCFE Level 4 Diploma: Cyber Security Engineer (603/7748/3)

Unit title & Number

Unit 3: Legislation, Policies and Procedures in Cyber Security (F/651/0935)

Assignment title

Legislation, Policies and Procedures in Cyber Security

Programme Cohort

April 2026

Issue Date

14-Sep-2026

Final Assignment Submission Deadline

07-Dec-2026

Late Submission Guidelines and

Feedback

The learners are required to follow the strict deadline set by the College for assignment submissions, in accordance with the NCFE submission guidelines and the College`s submission policy. They should also refer to the Merit and Distinction criteria, which require evidence of meeting agreed timelines and the ability to plan and organise time effectively, without which the learner may not expect to receive a higher grade. 

Note: The report may be resubmitted to achieve a higher grade, from Pass to Merit or Distinction. However, students with a grade of Not Yet Achieved may be allowed only one further chance to achieve the unit.

Feedback:

Formative feedback will be available in class during the Term. Final feedback will be available once the grades are confirmed.

Preparation Guidelines

Recommended Words: 3500 words

1. Submission Requirement

You must submit a written report addressing all the tasks outlined in this assignment. Any supporting documents should be attached as a separate file in the appendix section of your assignment and submitted before the specified deadline. All work must be uploaded through the Turnitin submission link available on the CSA VLE, where it will be checked for academic integrity.

2. Cover Page

The report must begin with the official cover sheet provided with this assignment brief, including a signed declaration, which should appear as the first page of the document.

3. Table of Contents

All main headings (such as Tasks or Learning Outcomes) and subheadings (for example, Pass, Merit, and Distinction criteria) must be presented professionally and listed in the Table of Contents, which should appear immediately after the cover page.

4. Introduction & Conclusion

Add a brief Introduction at the start of the report

Add a brief Conclusion at the end of the report

5. Formatting Requirements

a. The document must  follow these formatting guidelines:

b. Font size must be between 10 and 14 points (preferred size: 11).

c. Acceptable fonts include Arial, Calibri, Times New Roman, or Open Sans.

d. Line spacing must be set to 1.5.

6. Referencing Requirements

All submissions must be properly referenced. Any material taken from external sources must be cited using the Harvard Referencing Style (HRS). A complete reference list or bibliography using this system must also be included at the end of the report.

7. Language and Writing Style

Use professional academic language throughout the assignment, ensuring that explanations are clear and well-structured. Avoid the use of bullet points and ensure that responses are written in full paragraphs. You are encouraged to use a word processor spell-check tool to minimise spelling and grammatical errors.

8. Original Work

The assignment must be written in your own words. Any quotations, figures, or illustrations taken from external sources must be clearly referenced. Ensure that the English used is clear, concise, and easy to understand, and that the work is presented logically and professionally.

9. Appendix

Any diagrams, charts, tables, or code snippets included in the report must be clearly labelled and explained within the context of your discussion. Additionally, attach the images, screenshots, PPT Presentation, or dataset files at the start of the Word document.

10. File Format and Naming

The assignment must be submitted as a single Microsoft Word document (.docx). The file name must follow this format:

Unit03_FirstName_LastName_Assignment.docx

 Important Information

To gain a Pass in an NCFE Diploma module, you must meet ALL the Pass criteria; to gain a Merit, you must meet ALL the Merit and Pass criteria; and to gain a Distinction, you must meet ALL the Distinction, Merit, and Pass criteria.

Learning Outcomes (LOs)

LO1: Explore the fundamentals of common legislation and standards applicable to cyber security

LO2: Examine common factors of security management

LO3: Apply the framework fundamentals of IT service management (ITSM)  

Scenario

Case Study: MediCore Pharmacy Group (Must use the given organisation, or an organisation from the same industry)

MediCore Pharmacy Group is a UK-based healthcare and pharmaceutical retail organisation operating over 150 pharmacies across England, Scotland, and Wales. The company provides prescription services, online medicine ordering, patient consultations, and healthcare support through both physical branches and digital platforms. The organisation stores and processes large volumes of sensitive information including patient records, prescription histories, NHS referral information, employee records, supplier contracts, and payment details. These systems are managed through cloud-based applications, pharmacy management software, and centralised databases.

Key Problems Identified

An internal investigation found that a compromised third-party supplier account allowed unauthorised access to pharmacy management systems, exposing limited patient and employee data. The incident raised concerns about GDPR compliance and data protection. The review also identified weak security governance, inconsistent policy enforcement, limited staff cyber security awareness, and inadequate incident response documentation. Additionally, manual IT service processes caused delays in issue resolution, poor SLA monitoring, and ineffective vulnerability management.

Recommendations for Improvement

Senior management has requested a comprehensive review of cyber security legislation compliance, organisational policies, security governance practices, and IT service management processes. The organisation aims to strengthen regulatory compliance, improve security awareness, establish clear governance structures, formalise incident response procedures, and implement a modern ITSM framework aligned with recognised industry standards and best practices.

Your Role

You have recently joined HealthSecure Consulting as a Cyber Security Compliance Analyst. You have been assigned to support MediCore Pharmacy Group in reviewing its legal compliance obligations, improving organisational security management practices, and developing an effective IT Service Management framework. Your responsibilities include assessing security policies, analysing governance structures, reviewing compliance requirements, and recommending improvements that enhance cyber resilience and operational effectiveness.

Tasks

Task 1: Common Legislation and Standards Applicable to Cyber Security (LO1)

Sub-Scenario: Following the supplier account compromise, MediCore Pharmacy Group must review its compliance with legislation and standards governing the protection of patient and employee information. Senior management requires an assessment of how cyber security legislation, regulations, standards, and good practice guidance apply to the organisation and how policies can be improved to reduce future compliance risks.  

Requirements:

1. Summarise how key legislation and standards (GDPR, DPA 2018, Computer Misuse Act, ISO 27001) apply to the given organisation`s data protection and cybersecurity practices. (P1)

2. Explain the importance of following codes of good practice such as the NCSC Code of Conduct and data handling guidelines within the given organisation. (P2)

For Higher Grade:

3. Suggest policy improvements (e.g., identity and access management, encryption policies, staff training) to address gaps. (M1)

4. Justify these improvements by linking them directly to legislation and standards, showing how they enhance compliance and reduce risk. (D1)

Task Requirements

You are required to produce a written report addressing the requirements of this task. Include diagrams or tables if necessary to support your analysis.

Recommended word count: 1500 words.

Task 2: Examination of the Common Factors of Security Management (LO2)  

Sub-Scenario:

The recent security review highlighted weaknesses in governance, accountability, staff responsibilities, and incident management processes. Security responsibilities vary across pharmacy branches and incident reporting procedures are not consistently followed. Management requires an evaluation of how security management practices can improve organisational resilience, strengthen risk management, and support regulatory compliance.

Requirements:

1. Explain how factors of security management (governance, compliance, defined roles, incident readiness) link to desired security outcomes such as accountability, faster response times, and cross-team collaboration. (P3)

For higher grade:

2. Discuss how these factors influence and shape the given organisation’s ability to manage risks and respond to threats effectively. (M2)

3. Evaluate how standards such as ISO 27001 and NHS security frameworks can be used to strengthen governance, improve incident response, and achieve compliance. (D2)

Task Requirements

A written report covering the analysis of the given organisation’s security management structure and its impact on achieving security outcomes.

Recommended word count: 1000 Words.

Task 3: Apply the Framework Fundamentals of IT Service Management (ITSM) (LO3)

Sub-Scenario:

MediCore Pharmacy Group currently manages IT incidents, service requests, software updates, and vulnerability remediation through largely manual processes. Service disruptions occasionally affect online prescription services and branch operations, while SLA performance is not consistently monitored. Management has requested the development of an improved ITSM plan that enhances service reliability, supports regulatory requirements, improves vulnerability management, and ensures efficient delivery of IT services across all pharmacy locations.

Requirements:

1. Create a new ITSM plan for the given organisation that addresses issues such as slow recovery times, poor SLA adherence, and vulnerability management. (P4)

For higher grade:

2. Explain how your ITSM plan aligns with organisational policies, ISO standards, and SLA targets for service delivery. (M3)

Task Requirements

A comprehensive ITSM plan for the given organisation supported by an evaluation of its effectiveness and alignment with standards.

Recommended word count: 1000 words.

Plagiarism and Collusion

Any plagiarism or collusion will be taken very seriously in accordance with the policies of the college. Below are the definitions and parameters of plagiarism and collaboration in this context:

Presenting someone else`s work as your own is plagiarism. It involves turning in collaborative homework as a solo project and copying information verbatim from books or the Internet without citing the source.

Plagiarism refers to the practice of taking another person`s assignments and turning them in as your own. If plagiarism or collusion is suspected, it will be investigated and dealt with in accordance with college policy (please refer to the student handbook for further information on plagiarism and collusion).

AI Use Policy for This Assignment

To support academic integrity, learners must follow the guidance below regarding the use of Artificial Intelligence (AI), including tools such as ChatGPT, Copilot, Bard, and other generative AI systems. 

Permitted Use

Students may use AI tools for:

1. Researching background concepts

2. Generating ideas during early planning

3. Checking spelling, grammar, structure, and formatting

4. Clarifying understanding of terminology

5. Practising or testing knowledge

6. Creating datasets only if anonymised and checked for accuracy

7. Producing non-assessed drafts for inspiration

Not Permitted

Students must not use AI tools to:

8. Generate full answers, explanations, or solutions that are directly submitted as their own

9. Write entire sections of the assignment

10. Produce analysis or evaluation without meaningful human input

11. Create polished final content that the student only copies and pastes

12. Bypass learning activities by submitting AI-generated work

13. Fabricate citations, references, or invented facts

Student Responsibilities

Learners must:

14. Ensure all submitted work is their own, original, and written in their own words

15. If AI is used in any way, this must be declared in your references.

16. Clearly reference any AI assistance following the college’s academic integrity policy

17. Keep drafts to demonstrate development of work if requested

18. Verify all information for accuracy and relevance

19. Use AI as a support tool, not a writing substitute

Consequences of Misuse

Improper use of AI may be treated as academic misconduct and may result in:

20. Work being rejected

21. No grade being awarded

22. Requirement to resubmit

23. Further disciplinary action in serious cases

Submission

1. Initial submission of coursework to the tutors is compulsory in each unit of the course.

2. The student must check their assignments on the Caspian School of Academics (CSA) VLE using Turnitin to ensure the similarity index for their assignment stays within the College-approved level. A student can check the similarity index of their assignment up to five times in the Draft Assignment submission point located on the home page of the CSA VLE.

3. All Final coursework must be submitted to the Final submission point in the Unit (not to the Tutor). The student would be allowed to submit only once, and that is the final submission.

4. Any computer files generated, such as program code (software) and graphic files that form part of the coursework, must be submitted as an attachment to the assignment, along with all documentation.

5. Any portfolio for a Unit must be submitted as an attachment in the assignment

Submit to: CSA VLE (online submission only)

Extension and Late Submission

1. You must use an Exceptional Extenuating Circumstances (EEC) form, which is accessible at the Examination Office and CSA VLE, to request an extension if you require one for a legitimate cause. Do not request a coursework extension from the tutors as they do not possess the authority to extend the deadlines for coursework. The completed form must be turned into the Examination Office with supporting documentation, such as a medical certificate if you are ill.

2. Late entries will be accepted and graded in accordance with college policy. Please be aware that late submissions might not receive Merit and Distinction grades.

3. All late coursework must be submitted to the Late submission point into the unit (not to the Tutor) in the CSA VLE. A student is allowed to submit only once and that is also treated as the final submission.

4. If you fail in the Final or Late submission, you can resubmit in the Resubmission window. 

Explanation of Terms

This table explains how the terms used at level 4 in the unit content are applied to this qualification (not all verbs are used in this qualification).

Analyse

 Break the subject or complex situations into separate parts and examine
 each part in detail. Identify the main issues and show how the main ideas
 are related to practice and why they are important. Reference to current
 research or theory may support the analysis.

Critically analyse

 This is a development of ‘analyse’ which explores limitations as well as
 positive aspects of the main ideas in order to form a reasoned opinion.

Clarify

 Explain the information in a clear, concise way showing depth of
 understanding.

Classify

 Organise accurately according to specific criteria.

Collate

 Collect and present information arranged in sequence or logical order that is
 suitable for purpose.

Compare

 Examine the subjects in detail, consider and contrast similarities and
 differences.

Critically compare

 This is a development of ‘compare’ where the learner considers and
 contrasts the positive aspects and limitations of the subject.

Consider

 Think carefully and write about a problem, action or decision showing how
 views and opinions have been developed.

Demonstrate

 Practical application of an element/content to show that you understand
 theories/concepts in a practical sense.

Describe

 Provide a broad range of detailed information about the subject or item in a
 logical way.

Discuss

 Write a detailed account that includes contrasting perspectives.

Draw conclusions
 (which...)

 Make a final decision or judgement based on reasons.

Evaluate

 Examine strengths and weaknesses, arguments for and against and/or
 similarities and differences. Judge the evidence from the different
 perspectives and make a valid conclusion or reasoned judgement. Apply
 current research or theories to support the evaluation.

Critically evaluate

 This is a development of ‘evaluate’ where the learner debates the validity of
 claims from the opposing views and produces a convincing argument to
 support the conclusion or judgement.

Examine

 Look closely at something. Think and write about the detail, and question it
 where appropriate.

Explain

 Apply reasoning to account for how something is or to show understanding
 of underpinning concepts. Responses could include examples to support
 these reasons.

Explore

 Consider an idea or topic broadly, searching out related and/or particularly
 relevant, interesting or debatable points.

Identify

 Apply an in-depth knowledge to give the main points accurately (a
 description may also be necessary to gain higher marks when using
 compensatory marking).

Investigate

To inquire into (a situation or problem) to explore solutions.

Justify

Give a detailed explanation of the reasons for actions or decisions.

Perform

Present/enact/demonstrate practically.

Reflect

 Learners should consider their actions, experiences or learning and the
 implications of these in order to suggest significant developments for
 practice and professional development.

Review and revise

 Look back over the subject and make corrections or changes based on
 additional knowledge or experience.

Summarise

 Give the main ideas or facts in a concise way to develop key issues.

Test

 Complete a series of checks utilising a set procedure.