Task 4 / Minor A4: Smart Home Privacy, Security and Supply Chain Audit (Student Package)

Assessment details

• Subject: Year 10 Digital Technologies
• Assessment type: privacy/security case study and audit report
• Weighting: 15%
• Raw mark total: 50 marks
• Issued: Term 4 Week 1 (13 Oct - 16 Oct 2026)
• Risk matrix checkpoint: Term 4 Week 2 (19 Oct - 23 Oct 2026)
• Due window: Term 4 Week 3 (26 Oct - 30 Oct 2026)
• Main case study: Simpsons House smart home project
• Optional comparison: one real smart home product, app or connected device

Purpose

You have built a model smart home. This task asks you to audit it like a responsible designer.

You will explain what the system controls, what data it could create, what privacy and security risks matter, and what should improve before a similar system could be trusted by real users.

Task scenario

Your Simpsons House system may include an iPad or iPhone app, Swift Playgrounds code, Wi-Fi or network communication, a controller, lights, sensors, motors, a garage door, 3D printed parts and imported components.

For the audit, treat the model as a prototype for a real smart home system. You are not writing legal advice and you do not need to include private details about your real home or network. Keep the audit focused on the Simpsons House, a generic smart home, or an approved comparison product.

Required submission

Submit one organised report. It must include these six sections.

1. System overview

Include:

• system name and purpose
• main users or stakeholders
• key components: app, controller, network, sensors, outputs and physical house
• a component table or labelled diagram

2. Data and digital footprint map

Explain:

• what data the system uses now
• what data a real version could collect
• where the data starts, moves, displays or could be stored
• what personal information could become sensitive in a real smart home

3. Australian Privacy Principles critique

Apply at least four relevant APP ideas. Strong choices include:

• transparency
• collection limitation
• notification of collection
• use or disclosure
• security of personal information
• access and correction

For each APP idea, explain how it applies to the smart home system, what the concern is, and what improvement would make the system more trustworthy.

4. Security and supply chain risk analysis

Identify at least five risks. Your set must include:

• at least two user or security risks
• at least two software, component or supplier supply chain risks
• likelihood, impact and priority ratings
• short reasons for the ratings

5. Recommendations

Write at least five practical recommendations. Each recommendation must link to a risk from your matrix. Include:

• at least one quick fix
• at least one longer-term improvement
• at least one improvement that protects privacy or reduces digital footprint
• at least one improvement that reduces a supply chain or component risk

6. Conclusion

Give a final readiness judgement:

• ready for real users
• partly ready for real users
• not ready for real users

Justify the judgement with evidence from your audit. Name the highest priority improvement.

Minimum evidence checklist

• System/component diagram or table
• Data and digital footprint table
• At least four APP ideas applied to the system
• At least five risks in a risk matrix
• At least two user/security risks
• At least two software/component/supply chain risks
• At least five recommendations linked to risks
• At least two reputable sources
• A clear readiness conclusion

What not to include

• Do not include real home network passwords, IP addresses or private family details.
• Do not claim the prototype is a commercial product.
• Do not copy APP definitions without applying them to the system.
• Do not make unsupported claims such as "hackers will get in" without naming the vulnerability.

Suggested report structure

1. Title and system summary
2. Component table or diagram
3. Data and digital footprint map
4. APP critique table
5. Risk matrix
6. Recommendations table
7. Readiness conclusion
8. Sources

Key concepts

Useful sources

Use official or reputable sources where possible.

• OAIC Australian Privacy Principles: https://www.oaic.gov.au/privacy/australian-privacy-principles
• OAIC Privacy Act overview: https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act
• ASD ACSC managing cyber supply chains: https://www.cyber.gov.au/business-government/supplier-cyber-risk-management/managing-cyber-supply-chains

Curriculum links

• PS10-1 (WA10DIGPS1): Apply the Australian Privacy Principles to critique systems and manage the digital footprint of individuals.
• PS10-2 (WA10DIGPS2): Identify user or software supply chain vulnerabilities.
• DS10-1 (WA10DIGDS1): Explain how hardware and software manage, control and secure access to data in networked digital systems.
• ID10-3 (WA10DIGDTID3): Investigate technologies, resources and components with social, ethical, legal and practical constraints.
• EV10-1 (WA10DIGDTEV1): Evaluate design processes and solutions against criteria.

Marking summary

Grade guidance

Weighted mark conversion

This task is worth 15% of the course mark.