Filter by keyword, subject, or both. Updates live as new model answers are added to our portal.
information Governance and Cyber Security
2,500 words
Information Governance Policy for Healthcare Assistant (HCA)
This assessment is the group component of the Information Governance and Cyber Security module and requires a 2,500-word report for the fictional Healthcare Assistant (HCA) organisation. HCA is presented as a large private hospital group operating across the UK, with specialist healthcare services, intensive care facilities and a wide network of GPs, departments, partner hospitals, medical centres and third parties. The organisation processes highly sensitive information including patient personal information, admission details, health records, staff information and other organisational data. These data are shared across different sites and partners and are also used for analytical purposes, treatment planning and marketing activities. The assessment requires students to develop an Information Governance Policy for HCA and provide an accompanying report that justifies the policy contents, selected framework, risk assessment methodology and implementation strategy. The objective is to establish a robust information governance structure capable of protecting HCA's information assets while supporting legal, regulatory and contractual compliance. The first component of the report focuses on the introduction, purpose and scope of the Information Security Policy. Students should establish the organisational context, explain why information governance is important to HCA and define the people, processes, technologies and information assets covered by the policy. Particular attention should be given to the confidentiality, integrity and availability of sensitive healthcare and organisational information. The second component focuses on the identification and allocation of roles and responsibilities. The report should establish appropriate accountability for information governance and information security and consider responsibilities relating to legal, regulatory and contractual obligations. Relevant roles may include senior management, information security leadership, data protection personnel, information asset owners, information asset administrators, employees, contractors and third parties. The third component requires the development of an Information Governance Policy Framework and recommendations for a minimum of eight controls to establish an effective Information Security Management System. The assessment brief identifies ISO/IEC 27001:2022 as an appropriate framework within the developed policy and requires the framework and controls to be justified in relation to HCA's organisational context and security requirements. The fourth component focuses on implementation and monitoring. Students should develop an implementation plan explaining how the information governance policy and security controls can be introduced and maintained. Appropriate monitoring mechanisms should be considered to identify security threats, mitigate vulnerabilities, maintain accountability and support continuous improvement. Overall, the assessment requires a practical and critically justified approach to information governance within a healthcare environment. The report should demonstrate how an effective information governance policy can protect sensitive patient information, support regulatory compliance, establish accountability and strengthen HCA's ability to manage evolving cyber security threats.
Read Model Answer →
Business Simulation – Cyber Security
2,500 words
L7 Business Simulation – Cyber Security: Ethical Hacking and Vulnerability Assessment
This assessment is an individual cybersecurity portfolio based on a simulated business environment involving a fictional client, VulnTech Inc. Students take the role of a junior cybersecurity analyst and investigate vulnerabilities within a server deployed for the organisation’s legacy systems. The practical activities use the TryHackMe platform to simulate the web server environment and require students to apply ethical hacking techniques within an authorised scenario. The assessment focuses on the first three phases of ethical hacking: footprinting, scanning and enumeration, and gaining access. Students are required to gather information about the VulnTech server, including relevant details about its domain, IP range, network infrastructure, operating system, name servers, open ports and other technical information. They must provide evidence of the tools used, justify their selection, critically evaluate the methodology adopted and recommend appropriate mitigation strategies. The second task involves scanning and enumerating the server using information obtained during the footprinting stage. Students must identify potential vulnerabilities and provide evidence of the tools and methods used. The assessment requires students to critically evaluate their available options, explain the reasoning behind their decisions and recommend suitable strategies for mitigating identified risks. The third task requires students to gain access to the VulnTech server by exploiting one of the vulnerabilities identified during scanning and enumeration. Evidence of the tools and methodology must be provided, together with a critical evaluation of the approach, justification of decisions and recommendations for addressing the identified vulnerabilities. Students must also provide evidence of completing at least four different TryHackMe rooms or modules undertaken during the semester. The final component is a 1,500-word summary report reflecting on the key insights gained throughout the tasks. This report should consolidate the student's learning, discuss the main challenges and vulnerabilities identified, evaluate mitigation recommendations and critically examine the legal and ethical considerations associated with cybersecurity and ethical hacking practices. The assessment is designed to develop students' ability to analyse business and cybersecurity environments, identify organisational issues, evaluate alternative approaches, make informed management decisions and justify resource allocation. It also requires consideration of Environmental, Social and Governance (ESG) implications and the potential effect of cybersecurity practices on organisational perception and performance. The portfolio uses Harvard referencing, with appropriate academic and external sources cited throughout.
Read Model Answer →
Cyber Security / Internet of Things / Connected Systems
4,500 words
Security Evaluation for Connected Systems: IoT Strategy, Secure Design, Security Auditing and Organisational Change
This Security of Connected Systems assessment requires students to act as an external IoT Security and Scaling Strategist for a rapidly expanding Coventry-based technology startup specialising in connected devices and smart energy-monitoring systems. The client intends to scale its operations and enter new markets and therefore requires both organisational-change guidance and a comprehensive evaluation of its cybersecurity posture. 38f2fba9a933f212c9e46e8cc591cf2… The report combines business strategy with technical cybersecurity analysis. Students must review different secure design and development methodologies, compare their strengths and weaknesses, and recommend an appropriate approach for integrating security into the client's IoT software-development lifecycle. 38f2fba9a933f212c9e46e8cc591cf2… 38f2fba9a933f212c9e46e8cc591cf2… A major component of the assessment focuses on organisational change strategy. Students examine the internal and external factors driving organisational growth, develop a comprehensive strategy for achieving the client's business objectives, and explain how that strategy should be implemented and monitored. The report must also critically evaluate relevant change-management theories and models and address the complexities of leading and managing strategic transformation. This section carries 35% of the marks and is allocated approximately 2,000 words. 38f2fba9a933f212c9e46e8cc591cf2… The Security Audit Strategy section requires students to design a guide for auditing the client's connected system. Different approaches, including methodologies such as PTES and OWASP, should be compared and evaluated. Students must explain each stage of the selected testing methodology and justify why the individual steps are required. 38f2fba9a933f212c9e46e8cc591cf2… The final technical component applies these principles to an IoT vulnerability case study. Students research a real vulnerability in an IoT device, explain where the security flaw was introduced, identify weaknesses in the secure-design or audit process, assess the resulting security impact and propose appropriate corrective actions. 38f2fba9a933f212c9e46e8cc591cf2… Overall, the coursework integrates IoT cybersecurity, secure software development, security auditing, vulnerability analysis, organisational strategy and strategic change management. The marking scheme allocates 35% to organisational-change strategy, 20% each to secure design and development, security auditing and security recommendations, and 5% to report structure. 38f2fba9a933f212c9e46e8cc591cf2… Important: the brief states that it is for Coventry University Group students' own use and must not be passed to third parties or posted on a website. 38f2fba9a933f212c9e46e8cc591cf2… So use an original public summary like the one above, but do not upload the original brief itself.
Read Model Answer →
Cyber Security / Digital Forensics
3,877 words
Digital Forensics Investigation: USB, Memory and Windows Registry Analysis
This Digital Forensics Investigation Report presents a multi-source forensic examination involving removable media, volatile memory and a Windows disk image. The work is undertaken within an MSc Cyber Security context and demonstrates the application of forensic procedures, specialist analysis tools and evidential reasoning to investigate suspected criminal and malicious activity. The report places particular emphasis on maintaining evidence integrity, reconstructing activity across different forensic sources and correlating artefacts to produce defensible investigative findings. DF_Report_Sathiyaprakash The first part investigates a FAT32 USB forensic image associated with suspected video piracy and other potentially criminal activity. The examination uses tools including FTK Imager, Autopsy, Sleuth Kit, ewfmount, cryptographic hashing utilities and VeraCrypt. The methodology includes pre- and post-examination hash verification, read-only mounting, filesystem enumeration, deleted-file analysis and low-level sector examination. The investigation identifies deleted artefacts, portable anti-forensic utilities, browser evidence and an encrypted VeraCrypt container concealed within unallocated disk space. DF_Report_Sathiyaprakash The USB investigation also demonstrates the importance of evidence integrity and chain of custody. MD5 and SHA-256 hashes are used to establish and later confirm the integrity of forensic copies, while analysis is conducted without modifying the original evidence. The report examines filesystem structures, deleted files, anti-forensic tooling and encrypted data and records evidence handling through a formal chain-of-custody process. DF_Report_Sathiyaprakash DF_Report_Sathiyaprakash The second part focuses on volatile-memory forensics using a Windows memory image. Volatility 3 is used to identify the operating-system profile, reconstruct process hierarchies, inspect process ownership and security identifiers, and extract suspicious process memory. Particular attention is given to AtomicService.exe, which is observed running with SYSTEM privileges and associated with the Atomic Red Team framework and MITRE ATT&CK technique T1543.003 – Windows Service. The investigation also considers PowerShell activity, process execution timelines and indicators of suspicious behaviour. DF_Report_Sathiyaprakash DF_Report_Sathiyaprakash The third part conducts Windows Registry forensic analysis on the WinRegEvidenceP3.vhd image. Registry artefacts are examined using RegRipper, with analysis covering SYSTEM, SOFTWARE, SAM and NTUSER.DAT hives. The investigation evaluates system configuration, user accounts, application execution and persistence evidence using artefacts such as Run keys, BAM, Prefetch and scheduled tasks. These findings are then correlated with evidence recovered from volatile memory to reconstruct the sequence of suspicious activity. DF_Report_Sathiyaprakash Across the report, evidence from disk, memory and the Windows Registry is combined to reconstruct malicious activity and identify persistence mechanisms, elevated processes, suspicious user accounts and adversary-simulation tools. The analysis maps relevant behaviour to the MITRE ATT&CK framework and considers both technical findings and their evidential significance. The report therefore demonstrates practical competence in forensic acquisition principles, artefact analysis, timeline reconstruction, malware and process investigation, evidence correlation and professional reporting. Important for the Reference Library: this upload contains an actual student name on the cover page and detailed case evidence. Since your Reference Library says there is no student record behind uploaded past work, I would use the generic title and overview above rather than copying the student-identifying cover-page information into the public metadata. DF_Report_Sathiyaprakash
Read Model Answer →
Cyber Security / Applied Cryptography / Secure Systems Design
2,500 words
Secure Property Contract Exchange: Cryptographic Protocol Design, Threat Modelling and Post-Quantum Readiness
This Applied Theory of Cyber Security and Secure Design coursework places students in the role of a cyber security consultant engaged by Hackit & Run LLP, a legal firm specialising in UK and international property transactions. The firm wishes to implement a secure digital system for handling, exchanging and legally signing property contracts. Students must design and evaluate a secure communication protocol supporting interactions between the buyer’s solicitor, the seller’s solicitor and the buyer while addressing both first-time communications and previously established secure relationships. 11b17febb9eeb4570f76f6ca95a831a… Section A – Cryptographic Protocol Design, worth 45%, requires a complete secure communication protocol. Students must explain how trust is initially established, how later communications can be simplified without weakening confidentiality, integrity or availability, and how the buyer can digitally sign a contract in a manner enforceable under UK law. The design must justify specific cryptographic algorithms for functions such as key exchange, bulk encryption, digital signatures and hashing. The protocol must be presented through both a sequence diagram showing message flows and cryptographic operations and pseudocode explaining the key algorithmic stages. 11b17febb9eeb4570f76f6ca95a831a… Section B – Threat Modelling, worth 20%, requires a focused analysis using the STRIDE methodology. Students identify three realistic threats from different STRIDE categories and analyse the attack vector, asset at risk and potential effect on the legal transaction. Each threat must then be connected back to specific protocol defences, with residual risks acknowledged where controls cannot provide complete mitigation. The guidance encourages consideration of issues such as social engineering, insider threats, key-management failures and availability risks in addition to purely cryptographic attacks. 11b17febb9eeb4570f76f6ca95a831a… Section C – Security Evaluation Against Standards, worth 15%, requires students to evaluate the proposed system against a recognised cybersecurity standard or framework. Options include ISO/IEC 27001:2022, Common Criteria (ISO/IEC 15408) and the OWASP Application Security Verification Standard. Students select three or four directly relevant controls or requirements, assess whether the proposed design satisfies them, identify gaps and recommend specific improvements. 11b17febb9eeb4570f76f6ca95a831a… Section D – Post-Quantum Readiness and Critical Reflection, worth 15%, examines how a future quantum-capable adversary could affect the protocol. Students identify vulnerable cryptographic components, discuss the NIST Post-Quantum Cryptography standardisation programme, and examine replacement algorithms such as ML-KEM for key establishment and ML-DSA for digital signatures. They must also evaluate a hybrid migration strategy combining classical and post-quantum algorithms, considering performance overhead, backward compatibility and the legal admissibility of post-quantum digital signatures. 11b17febb9eeb4570f76f6ca95a831a… The remaining 5% evaluates professional report quality, logical structure, technical language, integration of diagrams and consistent CUHarvard referencing. Higher-quality work is expected to demonstrate a sophisticated trust model, clear traceability between threats and controls, precise standards mapping, practical security recommendations and well-evidenced analysis of post-quantum migration. 11b17febb9eeb4570f76f6ca95a831a… Important for the public Reference Library: the brief states that the assessment document is intended only for Coventry University Group students and must not be passed to third parties or posted on any website. Therefore, publish only an original high-level description such as the overview above; do not upload or reproduce the original assignment brief publicly. 11b17febb9eeb4570f76f6ca95a831a…
Read Model Answer →
Computer Science / Research Methods / Specialist Research
2,800 words
Research Specialism Report: Critical Review of Open Research Questions in Computer Science
This Advanced Research Topics in Computer Science assessment requires students to critically examine a research paper associated with their chosen MSc specialism and demonstrate an understanding of how established research techniques are used to create and extend knowledge in computer science. Eligible specialisms include Artificial Intelligence, Networking, Cyber Security, Software Engineering and Data Science. The assessment is intended to prepare students for deeper independent research as part of their Master's project. 7COM1084+Research+specialism+re… Students begin by providing a clear introduction to their selected research specialism and explaining the broader research area in a way that is accessible to readers with general computer-science knowledge. The report then identifies the open research question presented in the relevant 7COM1084 specialist lecture paper, explains the problem in detail and evaluates why it is scientifically significant or relevant to a real-world application. 7COM1084+Research+specialism+re… A substantial literature-review section requires students to examine existing and related research beyond the specialist lecture paper. The aim is to identify what previous work has achieved, explain why existing approaches do not fully solve the research problem and identify further unresolved questions. 7COM1084+Research+specialism+re… The research-methods section focuses on the approaches used in the selected specialist paper. Students are expected to describe and critically evaluate those methods, considering both their strengths and limitations. They must then propose an alternative or extended research approach that could build on the published work and investigate related open problems, drawing on principles of experimental design and theoretical or practical research. 7COM1084+Research+specialism+re… The final reflective component asks students to explain their personal investment in the research area, including why the selected question interests them and how their own strengths and prior experience would support future research in that domain. 7COM1084+Research+specialism+re… The report must not exceed 2,800 words ±10%, must use the Harvard referencing system, and must include at least 20 references, one of which must be the relevant 7COM1084 specialist paper. 7COM1084+Research+specialism+re… 7COM1084+Research+specialism+re… 7COM1084+Research+specialism+re… Overall, the assessment integrates research specialism knowledge, literature review, open-problem identification, methodological critique, research design, future-work development and scholarly communication within a Level 7 computer-science research context.
Read Model Answer →
Cyber Security / Penetration Testing
Web Application Penetration Testing and Security Vulnerability Assessment Portfolio
This postgraduate cyber security portfolio requires students to conduct a structured penetration test of a controlled web application and document the technical findings in a professional security-testing format. The assessment develops practical competence in identifying, validating and communicating security vulnerabilities while maintaining appropriate legal, ethical and professional boundaries. Assessment Brief CMP-L021 (PG) … Students begin by performing network and service enumeration, identifying open ports and the services running on the target host. They are expected to interpret the security implications of the findings and provide appropriate recommendations to a hypothetical client. The assessment then progresses into web-application vulnerability testing using tools such as a web browser, Burp Suite Community, Nmap and student-developed scripts. Assessment Brief CMP-L021 (PG) … A major part of the portfolio examines common web-security weaknesses including SQL Injection and Cross-Site Scripting. Students must demonstrate how they tested the application, capture relevant requests and responses, and explain the evidence supporting their conclusions. Additional tasks involve application and server reconnaissance, including identification of technologies, server versions, publicly exposed files and other information that may create security risks. Assessment Brief CMP-L021 (PG) … The higher-level reporting component requires students to document significant vulnerabilities using the conventions of a professional penetration-test report. This includes assigning CVSS scores, relating identified weaknesses to the OWASP Top 10 and NIST classifications, and supporting findings with appropriate technical evidence. Assessment Brief CMP-L021 (PG) … Students must also produce an executive summary for a non-technical audience, considering security, privacy, regulatory exposure and budget implications. A vulnerability table linking technical weaknesses with relevant regulatory concerns is also required. Overall, the assessment integrates technical penetration testing with risk communication, vulnerability classification, evidence collection and professional security reporting. Assessment Brief CMP-L021 (PG) … Overview word count: approximately 320 words. AI-use note: AI can be used in this assessment, but any use must be acknowledged and AI-generated outputs must be appropriately cited. Assessment Brief CMP-L021 (PG) …
Read Model Answer →
Cyber Security / Ethical Hacking / Penetration Testing
4,000 words
Ethical Hacking and Penetration Testing: Vulnerability Exploitation, Privilege Escalation and Mitigation
This Ethical Hacking and Penetration Testing coursework requires students to conduct a practical CTF-style penetration test against a set of authorised target machines and produce a professional technical report documenting the compromise of one selected target. The assessment evaluates practical exploitation skills alongside the ability to analyse risk, explain attack vectors and recommend effective security controls. 8598ba8d8fff5a38af8d427a4ce8f84… The practical element requires students to identify vulnerabilities in multiple target systems, exploit those weaknesses to gain low-privileged access and then perform privilege escalation to obtain root-level access. Successful completion of each stage produces flags, with separate user and root flags contributing directly to the practical marks. Brief descriptions of the attack vectors and payloads used must also be recorded. 8598ba8d8fff5a38af8d427a4ce8f84… The written report focuses in detail on one compromised machine. Students must explain the reconnaissance and vulnerability-identification process, including the techniques used to discover services, web content and potential attack surfaces. The marking criteria specifically recognise appropriate reconnaissance tools such as Nmap and FFUF and reward clear justification of methods and links between reconnaissance results and identified threats. 8598ba8d8fff5a38af8d427a4ce8f84… 8598ba8d8fff5a38af8d427a4ce8f84… A further component requires a formal risk rating for the discovered vulnerabilities. Students should use a recognised risk-classification approach, such as OWASP or SANS, justify the assigned severity and discuss relevant social, legal and ethical considerations. Higher-performing work is expected to connect those considerations directly to the specific vulnerabilities identified. 8598ba8d8fff5a38af8d427a4ce8f84… The exploit section should explain the technical cause of the vulnerability, describe the exploitation process and present relevant example payloads. Mitigation recommendations must then be linked directly to the vulnerabilities discovered, with clear explanations of where the weakness occurs and how it can be remediated. 8598ba8d8fff5a38af8d427a4ce8f84… Overall, the coursework integrates reconnaissance, vulnerability analysis, exploitation, privilege escalation, risk assessment, ethical and legal considerations, technical reporting and defensive mitigation within an authorised penetration-testing environment. Important: this brief states that it is for Coventry University Group students' own use and must not be passed to third parties or posted publicly. 8598ba8d8fff5a38af8d427a4ce8f84… So for your public Reference Library, use an original summary like the one above rather than uploading the assessment brief itself.
Read Model Answer →
Digital Forensics / Cyber Security
3,000 words
Digital Forensics Investigation of a USB Device: Evidence Acquisition, Analysis and Reporting
This Digital Forensics assessment requires students to undertake a simulated professional investigation of a USB storage device while acting as a digital forensic trainee for a fictional forensic-services organisation. The nature of the suspected wrongdoing is initially unknown, requiring the investigator to apply appropriate forensic methodologies, tools and analytical techniques to identify suspicious activity, recover relevant artefacts and determine whether evidence of malicious or unauthorised behaviour exists. 7070SCN_Assessment Brief_2526MA… The investigation begins with authorisation, evidence handling and chain of custody. Students must demonstrate secure receipt and management of the USB device, operate within the authorised scope of the investigation and maintain records covering each stage of the evidence lifecycle. Forensic acquisition requires use and validation of a software write blocker, creation of bit-for-bit forensic images and cryptographic hashing to demonstrate that working and evidential copies maintain integrity. 7070SCN_Assessment Brief_2526MA… The analytical stage involves examination of the working forensic image using appropriate digital-forensic tools. Students investigate file-signature mismatches, password-protected files, registry artefacts, USB history, user activity, metadata and timeline relationships. Where suspicious executable files are discovered, static and/or dynamic malware analysis may be undertaken. The investigation can therefore span documents, images, applications, executables and registry hives. 7070SCN_Assessment Brief_2526MA… Students must maintain objective and chronological forensic case notes documenting evidence acquisition, preservation, analysis and interpretation. These records should support reproducibility and potential evidential admissibility. The final forensic report summarises findings, explains and justifies the tools and methodologies used, records integrity-verification results, discusses relevant legal, ethical and professional principles and provides appropriate recommendations for further action. 7070SCN_Assessment Brief_2526MA… The assessment also encourages advanced forensic analysis where relevant, including OSINT, password recovery or decryption, data carving, regular-expression searching, advanced registry analysis and static or dynamic malware investigation. Professional practice is assessed through adherence to recognised forensic methodologies, industry best practice, legal and ethical obligations, chain-of-custody records and evidence-handling procedures. 7070SCN_Assessment Brief_2526MA… Overall, the coursework integrates forensic acquisition, evidence preservation, artefact analysis, advanced investigation techniques, professional documentation and legally defensible reporting within a realistic digital-forensics case-study environment. Important for your public Reference Library: this brief explicitly states that it is for Coventry University Group students' own use and must not be passed to third parties or posted on any website. 7070SCN_Assessment Brief_2526MA… So use the metadata and an original high-level overview like the one above, but do not upload or publicly reproduce the assessment brief itself.
Read Model Answer →
Cyber Security
Contextual Risk Assessment and Policy to Address Information Security within Supplier Agreements
This assignment focuses on the development of a contextual risk assessment and an information security policy addressing security requirements within supplier agreements for Heathrow Airport Holdings (LHR). The assessment is an individual postgraduate task worth 60% of the module and requires students to apply information security risk assessment methods, security standards and policy development techniques to a realistic organisational scenario. The assignment is based on a cyber-attack affecting Heathrow and other European airports in September 2025, where disruption to a third-party cloud-based check-in and baggage system affected airport and airline operations. The scenario highlights the security risks associated with interconnected systems, third-party suppliers and dependence on critical digital services. Students are required to assume the role of a new Chief Information Security Officer (CISO) at Heathrow Airport Holdings and investigate the organisation, its environment and the relevant threat landscape. The task requires the development of a clear organisational context, including appropriate assumptions, followed by an asset-based information security risk assessment. The risk assessment should identify and prioritise relevant risks and support the selection of controls needed to manage residual information security risks. The main policy component requires students to develop an “Information Security within Supplier Agreements” policy aligned with the ISO 27000 family. The policy should establish clear security responsibilities between LHR and its suppliers and address the protection of information assets, legal and regulatory requirements, and supplier-related security obligations. Particular attention is required for confidentiality, integrity and availability, together with ISO 27002 controls relating to information security policies and supplier agreements. The assignment also requires consideration of acceptable use of information and other assets, information classification and information labelling. The final submission consists of a cover page, context establishment, an asset-based risk assessment, the supplier information security policy, references and supporting appendices. The context establishment is limited to a maximum of two pages or 1,000 words, while the policy is limited to three pages or 1,500 words. The risk assessment is completed using the supplied template. Students are also required to provide evidence and commentary concerning the development and tailoring of the policy when using an approved AI tool, together with a self-written evaluation addressing strengths, weaknesses, privacy, GDPR and ethical considerations. The assessment is marked across context establishment, asset-based risk assessment, the information security within supplier agreements policy, and presentation, design and references. At least 20 authentic references, including standards and papers accessed through the University library, are required.
Read Model Answer →
Computer Science
2,800 words
Specialism Research Report
The Specialism Research Report is an individual assessment for the Advanced Research Topics in Computer Science module. The assignment provides students with an opportunity to develop a deeper understanding of a selected computer science research specialism and to investigate an open research question within that area. The available research specialisms are Artificial Intelligence, Networking, Cyber Security, Software Engineering and Data Science. Students are expected to examine the research specialism associated with their degree route and develop their understanding of current research challenges, established techniques and potential future research directions. The report requires students to provide an overview of the research paper presented in the relevant 7COM1084 Research Specialism Lecture. The report must identify and explain the research question addressed by the specialist paper, consider why the research problem is scientifically interesting or relevant to a real-world application, and investigate possible approaches for addressing the question. Students must also identify further research that could build upon the existing work and consider their own personal strengths, interests and experience in relation to the proposed research. The report is structured into five main sections. The first section, Introduction of Research Specialism, provides a general overview of the selected research area and is intended to be accessible to readers with broad computer science knowledge. The second section, Open Research Question, identifies and explains the research problem discussed in the specialist lecture paper and considers its scientific or practical significance. The third section, Existing and Related Work, provides a literature review of research beyond the specialist paper, identifies limitations in existing approaches and discusses related open research problems. The fourth section, Research Approach, examines the methods used in the specialist paper, evaluates their strengths and weaknesses, and proposes an approach for extending the research. The fifth section, Personal Investment, explains the student's interest in the research question and evaluates their personal strengths and experience relevant to conducting the proposed research. Students are expected to use module reading materials and secondary research to support their discussion. The report must use Harvard referencing and include at least 20 references, including the 7COM1084 specialist paper. The references are excluded from the word count. The submission must not exceed 2,800 words, with a permitted range of ±10%. The assessment develops students' ability to understand established research techniques, identify research problems from relevant literature, propose alternative solutions, critically evaluate research literature, develop approaches for future research and communicate research knowledge effectively in a scholarly manner.
Read Model Answer →
Networking and Security Practice
Networking and Security Practice – Recorded Demonstration
This assessment for the MSc Cyber Security module Networking and Security Practice is a practical recorded-demonstration coursework designed to assess students' ability to configure, secure, troubleshoot and monitor a virtualised sandbox network. The assessment contributes 60% of the module mark and consists of four recorded demonstration videos, with each video limited to a maximum of five minutes. The completed videos are submitted through a Moodle quiz as video files or accessible links. The practical environment uses virtual machines running Ubuntu Server and Ubuntu Desktop on VirtualBox or UTM. Students deploy a four-machine architecture consisting of a Gateway, Webserver, Workstation and Zabbix-Server. The Gateway acts as the router, firewall and NAT gateway; the Webserver hosts an Nginx web server; the Workstation is used for administration and testing; and the Zabbix-Server provides network monitoring. The architecture requires appropriate network interfaces, IP addresses, routing and communication between the different internal networks. The coursework develops practical networking and system administration skills through several phases. Students install and configure operating systems, allocate virtual machine resources, configure static IP addresses, enable IP forwarding and NAT masquerading, and implement firewall rules using iptables. They also develop command-line proficiency using networking, DNS, security, remote-access and web tools including ping, traceroute, ss, nslookup, dig, nmap, Wireshark, netcat, SSH, SCP, rsync, curl and wget. Students must also configure secure remote access and deploy an Nginx web server. SSH must be hardened by disabling password authentication and root login, while key-based authentication is used for secure access. The Webserver must contain a customised landing page showing the student's name and student ID, which is accessed from the Workstation. The monitoring component requires installation and configuration of Zabbix, deployment of agents across the virtual machines, host monitoring, a customised dashboard containing at least five live-data widgets and configured alerts or triggers. Students must explain what their selected monitoring elements measure and why they are operationally useful. The traffic-analysis component uses Wireshark to capture and examine HTTP, ICMP and DNS traffic. Students apply appropriate filters, identify protocols using the Protocol Hierarchy and discuss the security implications of unencrypted HTTP traffic, including secure alternatives such as HTTPS and DNS over TLS. The security-evaluation component uses Nmap within the isolated virtualised sandbox to identify open ports and services, assess vulnerabilities and recommend mitigations. Students must also demonstrate iptables forwarding and NAT masquerading rules. The four videos cover Network Infrastructure, Network Monitoring, Traffic Analysis and Security Evaluation. The assessment is marked out of 100, with 35 marks allocated to Network Infrastructure, 25 to Network Monitoring, 20 to Traffic Analysis and 20 to Security Evaluation. Students are expected to provide clear voice narration, explain commands and outputs, demonstrate technical understanding and critically relate their work to network security. The assessment develops employability skills in Linux administration, remote system management, network troubleshooting, security hardening, packet analysis, port and service scanning, virtualisation and network monitoring. It also requires students to conduct security testing ethically within their own isolated virtualised environment and prohibits unauthorised scanning of university networks, public websites or other systems.
Read Model Answer →
Data Management / Business Analytics
2,500 words
Data and Decision Making (BS776) — Business Report: Two-Source Data Analysis in Python for Evidence-Based Decision-Making
This Level 7 report applies data management theory to a self-selected industry problem and carries it through to a working Python analysis and a defensible business recommendation. The brief is deliberately open on sector — finance, healthcare, transport, cyber security, business intelligence and others are all permitted — but firm on one point: the chosen topic must carry a genuine business implication rather than being a purely technical or clinical analysis. The work therefore begins by framing a specific data-driven decision the organisation needs to make, and returns to that decision at every stage. Two distinct data sources are then identified from approved open repositories and critically evaluated side by side. The evaluation covers the data types each holds, how the data was collected and what bias that introduces, how each is stored and managed, and where the weaknesses lie — proposing concrete data management solutions for the problems identified rather than simply cataloguing them. The analytical core examines, transforms and explores both datasets using univariate and multivariate techniques. All work is carried out in Python within Google Colab, with full screenshots of the code and outputs placed in the appendices and the live Colab link shared for verification. Charts and tables sit in the main body where they support interpretation, each labelled and referenced back to its data source, and each appendix is cited from the narrative so the reader can move between argument and evidence. Data cleaning and transformation steps are shown and justified, not glossed. Findings are reported at length and converted into a clear recommendation covering both the immediate decision and the current and future direction of data management for the business. The limitations section is written honestly — sample coverage, data recency, the assumptions the transformation forced, and what the proposed solution cannot address. Running alongside this, the module's weekly consolidation discussions are evidenced. Five or more critical responses across units two to nine are screenshotted, dated, individually labelled as appendices, and each supported by academic and practice references. Crucially, these are not left sitting in the appendix: they are cited and used within the main body to support the critical discussion, which is where the marks for that component sit. The report follows the prescribed structure — title page, executive summary, contents, introduction, main section with subsections per task, findings, recommendations, limitations, conclusion, Harvard reference list and full appendices — submitted as a single file.
Read Model Answer →
Cyber Security / Cloud Management
2,500 words
Cyber Security and Cloud Defence Strategy for ShieldSafe Analytics
This Level 7 Cyber Security for Business and Cloud Management portfolio examines the security challenges faced by ShieldSafe Analytics Ltd., a multinational health analytics organisation specialising in AI-enabled diagnostics and telehealth. The organisation processes high volumes of sensitive patient information, including biometric and genomic data, across hybrid-cloud environments and IoT-enabled healthcare infrastructure. Following a suspected data-exfiltration incident involving anomalous traffic from a diagnostic platform connected to third-party cloud APIs, students are required to evaluate the organisation's information environment and develop appropriate cyber-security and cloud-defence strategies. The first task focuses on information environments and the weaponisation of information. Students identify critical elements of ShieldSafe's information environment, evaluate vulnerabilities associated with the data-exfiltration incident and examine how patient data or analytical systems could be manipulated by malicious actors. Relevant real-world healthcare cyber incidents should be used to support the analysis. The second task examines offensive and defensive Information Operations. Students analyse techniques used by nation-state actors and cybercriminal organisations, including healthcare ransomware incidents such as WannaCry, and compare offensive and defensive approaches. The analysis considers how ShieldSafe can balance these approaches while protecting sensitive data and preserving trust in AI-enabled diagnostic systems. The third task applies Information Operations within legal and ethical boundaries and requires development of a secure cloud migration strategy for ShieldSafe's legacy Electronic Health Record system. The supporting student guide specifically permits students to demonstrate an implementation using Amazon AWS, including IAM users and roles, VPC configuration, security groups, web servers, EC2 instances and AWS migration services. The final task requires a comprehensive cyber-defence strategy, including implementation of Zero Trust Architecture across cloud platforms and analysis of vulnerabilities affecting cyber-physical healthcare systems such as wearable medical devices and diagnostic equipment. Students must propose controls against both remote and local attacks. Overall, the portfolio integrates information operations, healthcare cybersecurity, hybrid-cloud protection, secure migration, Zero Trust, cyber-physical security and strategic cyber defence. The work is produced as a portfolio report using PebblePad and must use Harvard referencing throughout, with appropriate citation of academic sources, images, definitions and external arguments.
Read Model Answer →
Cyber Security / Penetration Testing
2,400 words
Grey-Box Penetration Testing: Vulnerability Assessment, Exploitation and Mitigation
This technical cyber-security project presents an authorised grey-box penetration test conducted within a controlled virtual laboratory environment. The objective is to assess the security posture of a deliberately vulnerable target system, identify weaknesses in exposed network services, demonstrate how those weaknesses could be exploited, evaluate their security and organisational impact, and recommend appropriate mitigation measures. The assessment follows a practical penetration-testing workflow supported by technical evidence, screenshots, activity records and academic research. The project begins with laboratory configuration, network discovery, service enumeration and vulnerability analysis. Tools including Kali Linux, Metasploitable, VMware, Nmap, Netcat and Metasploit are used across the testing lifecycle. Identified services are mapped to known vulnerabilities before controlled exploitation is undertaken and the resulting access is documented. The activity log records the progression from environment setup and network scanning through vulnerability identification, exploitation, evidence collection and final reporting. Five principal attack vectors are examined. These include the vsftpd 2.3.4 FTP backdoor, Samba username-map-script exploitation, an UnrealIRCd backdoor, insecure Java Remote Method Invocation and a misconfigured DistCC service. The practical demonstrations show how vulnerable or incorrectly configured services can permit unauthorised command execution and, in several cases, privileged shell access. For each vulnerability, the report explains the weakness, exploitation process, observed result, security impact and proposed mitigation. Recommended controls include patching or upgrading obsolete services, disabling unnecessary services, implementing firewall restrictions, strengthening authentication and input validation, restricting access to authorised systems, applying least privilege and monitoring suspicious activity. The project also incorporates group management and reflective practice. Team members perform specialised roles covering laboratory configuration, reconnaissance, vulnerability analysis, exploitation and documentation. Individual reflection considers technical performance, teamwork, evidence management and future skills development, demonstrating how structured collaboration contributes to an effective penetration-testing engagement. Important: unlike the earlier assignment briefs, these uploads appear to be completed student/project materials rather than the official 7COM1068 assessment brief. Therefore I would not invent the university, academic level or academic year. If you upload the actual 7COM1068 assignment guideline, I can fill those fields exactly.
Read Model Answer →
Cloud Computing / Big Data Technologies / Cyber Security
2,500 words
Cloud and Big Data Security Application: Design, Implementation and Evaluation
This assessment for the Cloud and Big Data Technologies module requires students to design, implement and evaluate an individual cloud-based or distributed data application. The project focuses on practical solutions involving the complex transformation, processing, storage and security of big data within cloud environments. Students are expected to demonstrate how distributed data can be organised in the cloud, how data pipelines can be used to access or process distributed databases, and how appropriate security controls can be incorporated into the resulting architecture. Students have considerable freedom when selecting their application. Suggested project directions include developing a data-science solution using SQL or MongoDB with cloud storage and an appropriate security policy; implementing privacy-preserving distributed processing using techniques such as Differential Privacy; creating multi-party authentication and group-based access-control mechanisms; or designing Multi-Level Security, Attribute-Based Encryption or Role-Based Access Control solutions. Projects may also examine distributed or cloud applications using security protocols such as SSH, SSL or IPsec. Creativity and originality are explicitly encouraged. The written component is a Design and Implementation Document of no more than approximately 2,500 words. It should present the project aims and objectives, application concept, cloud and security technologies, functional and security requirements, architecture and design decisions, protocols, access-control mechanisms, implementation process, achievements, problems encountered and overall evaluation. Relevant diagrams, such as interaction or sequence diagrams, may be used to explain system behaviour and architecture. The assessment also requires submission of the functioning Cloud and Big Data Security application and a 7-minute highlight demonstration video. The video should demonstrate the application's major features, implementation details, security functionality and, where appropriate, attack scenarios. Assessment places strong emphasis on the quality of the design and implementation documentation, originality, use of advanced features, and the overall effort and technical quality of the completed application. Students are therefore expected to demonstrate independent development rather than simply reproduce an existing tutorial.
Read Model Answer →
Cyber Security / Digital Forensics
3,500 words
Digital Forensics Portfolio: Disk Image, Memory and Windows Registry Investigation
This Level 7 Digital Forensics portfolio requires students to conduct a structured forensic investigation across disk, memory and Windows Registry evidence. The assessment develops practical investigative skills alongside professional forensic reporting and requires students to preserve evidence integrity, document methodology, interpret technical artefacts and communicate findings clearly. The portfolio is equivalent to 3,500 words and forms 60% of the module assessment. The first part involves analysing a seized USB forensic image in the context of a suspected insider involved in video piracy and potentially more serious criminal activity. Students must follow ACPO digital forensic best practice, verify image integrity before and after examination, maintain a clear chain of custody, identify significant device properties and artefacts, and justify conclusions using evidence. Tools such as FTK Imager and Autopsy may be used, alongside other appropriate forensic utilities. The scenario also requires examination of an encrypted VeraCrypt container discovered within the evidence. The second part focuses on memory forensics using a Windows memory dump. Students are expected to reconstruct process execution timelines, examine suspicious processes including PowerShell, Notepad and AtomicService, identify process owners and SIDs, extract relevant memory artefacts and produce an executive summary suitable for a non-technical audience. The third part requires an extensive Windows Registry and system artefact investigation. Students examine operating-system information, users, network configuration, login activity, suspicious files, executable and DLL creation, BAM records, Prefetch artefacts, scheduled tasks, persistence mechanisms and evidence of potentially malicious activity. Findings must be supported with screenshots, extracted artefacts or other appropriate evidence. The assignment must use the university's official portfolio template and be submitted as a PDF. The template organises the work into forensic image analysis, memory investigation and Windows Registry investigation sections. For a public Reference Library entry, this title is better than simply “Digital Forensics Coursework” because it clearly communicates the three major technical components of the work.
Read Model Answer →
Cyber Security for Business and Cloud Management
This activity aims to assess your comprehension of the diverse concepts discussed in this module. You must use the frameworks and concepts covered in this module's delivery to respond to all the tasks below. Scenario ShieldSafe Analytics Ltd. is a fast-growing health analytics company specialising in AI-driven patient diagnostics and telehealth platforms. Operating across multiple countries, the company processes high volumes of real-time patient data, including biometric and genomic records. Due to the increased reliance on remote healthcare and IoT-enabled medical devices, their infrastructure has expanded into hybrid cloud environments. Recently, ShieldSafe experienced a suspected data exfiltration incident involving anomalous traffic from one of its diagnostic platforms integrated with third-party cloud APIs. As a result, executive leadership has raised concerns about the company’s vulnerability to adversarial information operations, particularly in relation to data manipulation, misinformation, and insider threats. As a Junior Cybersecurity Strategist, you’ve been recruited to support the lead cyber intelligence consultant in reviewing vulnerabilities within their information environment, exploring offensive and defensive Information Operations (IO) concepts, and crafting robust cyber defence mechanisms. The leadership also wants to migrate a legacy electronic health record (EHR) system used across its African operations to a more scalable and secure cloud infrastructure. However, concerns exist regarding cross-border data protection laws, insider threats, and the strategic use of information in potential cyber warfare scenarios.
Read Model Answer →
L7 Cyber Security for Business and Cloud Management
This activity aims to assess your comprehension of the diverse concepts discussed in this module. You must use the frameworks and concepts covered in this module's delivery to respond to all the tasks below. Scenario ShieldSafe Analytics Ltd. is a fast-growing health analytics company specialising in AI-driven patient diagnostics and telehealth platforms. Operating across multiple countries, the company processes high volumes of real-time patient data, including biometric and genomic records. Due to the increased reliance on remote healthcare and IoT-enabled medical devices, their infrastructure has expanded into hybrid cloud environments. Recently, ShieldSafe experienced a suspected data exfiltration incident involving anomalous traffic from one of its diagnostic platforms integrated with third-party cloud APIs. As a result, executive leadership has raised concerns about the company’s vulnerability to adversarial information operations, particularly in relation to data manipulation, misinformation, and insider threats. As a Junior Cybersecurity Strategist, you’ve been recruited to support the lead cyber intelligence consultant in reviewing vulnerabilities within their information environment, exploring offensive and defensive Information Operations (IO) concepts, and crafting robust cyber defence mechanisms. The leadership also wants to migrate a legacy electronic health record (EHR) system used across its African operations to a more scalable and secure cloud infrastructure. However, concerns exist regarding cross-border data protection laws, insider threats, and the strategic use of information in potential cyber warfare scenarios.
Read Model Answer →