Computing
Independent Critical Analysis 30
Independent Critical Analysis 30 is an individual assessment that develops students' ability to critically analyse ethical, social, legal and professional issues arising from a computing-related scenario. The assessment is worth 30% of the overall module assessment and requires students to respond to three questions relating to the ethical and professional issues presented in the scenario. Students are expected to apply the specific analytical techniques or approaches identified in the assessment instructions when developing their responses. The assessment focuses on the critical examination of ethical issues and professional responsibilities within contemporary computing contexts. Students are expected to identify relevant ethical concerns and provide a reasoned justification for their analysis. The marking criteria emphasise the identification of a single ethical issue or ethical risk, followed by a structured analysis using the EHAZOP Framework. Higher-level responses are expected to provide clear justification for the ethical issue selected, examine the associated consequences, and demonstrate a systematic and critical approach to the scenario. A second component focuses on ethical risk analysis using the Ethical OS Toolkit. Students are expected to identify an ethical risk associated with the scenario and justify their selection through a structured analysis. The assessment therefore requires students to consider the potential consequences of computing-related decisions and to demonstrate an understanding of how ethical risks can be identified and evaluated. The final component addresses professional issues. Students are expected to identify relevant professional principles and apply an appropriate professional code of conduct, such as the ACM or BCS Code of Conduct, to the scenario. The analysis should explain which professional principles are relevant and provide a reasoned justification for their application. The marking criteria place emphasis on systematic analysis, appropriate justification and understanding of responsible computing practice. The assessment therefore connects ethical decision-making with professional responsibilities and standards. The assignment also assesses broader module learning outcomes relating to ethical standards, contemporary computing contexts, legal and professional issues, and the ability to critically analyse high-profile cases or case studies. Students are required to submit the provided answer sheet containing the scenario and three questions. The assessment brief states that submissions are subject to Turnitin and that students must follow the specified submission requirements.
Read Model Answer →
Security of Emerging Connected Systems
1,500 words
CW1: Policy and Legal Aspects Report – IoT System
This 1,500-word report for the Security of Emerging Connected Systems module examines the legal and security implications of a proposed Internet of Things (IoT) system designed for consumers to monitor food intake and bodyweight. The coursework requires students to provide an initial investigation of the potential legal pitfalls associated with the proposed product and identify appropriate solutions or mitigation measures. The report is worth 5 credits and is assessed as an individual written report. The proposed IoT system consists of several connected components. A smartphone application allows users to scan barcodes of processed food to record calorie and nutritional information against their health record. A kitchen scale communicates with the phone application to record the weight of ingredients used in home-cooked meals. A bathroom scale records the user's weight and provides light and sound reminders to encourage regular measurements. A UK-based server stores the collected information and generates individual user reports. The main purpose of the report is to ensure that the company understands the UK and international laws that may apply to the proposed system. Students must identify potential legal issues and recommend appropriate mitigation through technology, organisational policy, licensing arrangements or user agreements. The system definition is deliberately broad, so students should not make unsupported assumptions about its design. Where several options have different legal implications, the report should compare the relevant alternatives and explain their implications rather than presenting only one solution. The initial product is intended for UK residents, while the company is considering future expansion into the United States. Consequently, the report should focus primarily on UK law but also include a short section discussing legal aspects that may need to be reconsidered when entering the US market. The report is intended for company executives and may subsequently be provided to the R&D department. Therefore, high-level outcomes should be communicated early, while useful links to technical information such as encryption schemes, protocols and frameworks may be provided without extensive technical explanations in the main report. The assessment places 50% of the marks on understanding and coverage of UK and US law, 40% on technical recommendations and 10% on report presentation. Strong submissions are expected to provide comprehensive coverage of relevant legislation, connect legal issues with the wider security context, analyse technical recommendations for both regions, identify differences between UK and US requirements and support arguments with appropriate citations and a wide range of sources. The assignment learning outcomes focus on critically evaluating the role of security policy in protecting information assets and proposing appropriate policies for internet-based technologies. They also require students to demonstrate an understanding of key legislation relating to information security and how legislation influences organisational security policy. The final report should therefore combine legal analysis with practical security recommendations, addressing the proposed IoT system from both UK and US perspectives while remaining suitable for both technical staff and non-technical management.
Read Model Answer →