When I took this unit, I found there was very little to learn, and what was there to learn was very base level. No actual technical skills learnt, you just learn about Cyber Security Business standards and other key terms. When it came to the assessment, we were provided rather general instructions and then marked down for not covering very specific points in our reports that weren't properly specified prior to the assessment. We then enquired further about certain comments left on our assessment as well as appealing our grade to which we never received a reply or any form of further contact. I feel the content of this unit could easily be covered in a 2ish week period within a broader more meaningful syllabus, and there would be no real loss of learning opportunities. However, I feel the staff are likely aware of the simplicity of the unit and to counteract it, they make the assessment specifications very vague so they can give retrospective reasons to mark students down, resulting in the bell-curve of grades required, also giving the illusion that the unit content has any level of difficulty to it. I am now in the final year of my IT degree, with a major in Comp Sci and minor in Engineering Foundations, and throughout my entire degree I am yet to do a more 'nothing unit'. Despite this, me and my group members received a 4 for this unit, which is still the lowest grade any of us have received, throughout our tertiary education.