INFORMATION SYSTEMS SECURITY AND RISK MANAGEMENT (4 Credits)

Learning Outcomes:

On successful completion of this Course, students will be able to: LO1 – Identify principles and attributes of information security risk; LO2 – Analyse the security risk of an organization; LO3 – Estimate an organization’s information security requirements and the need to establish policy and objectives for information security; LO4 – Develop controls to manage an organization’s information security risks in the context of the organization’s overall risks.

Topics:

1. Security Evolution;
2. Enrichment Activity: Case Study, Discussion and Consultation – Sample Security Risk Profile;
3. Enrichment Activity: Discussion and Consultation – Qualitative risk scale;
4. Risky Business; The Risk Management Lifecycle; Enrichment Activity: Guest Lecturer – Information Systems Security;
5. Enrichment Activity: Case Study, Discussion and Consultation – Architecture Risk Analysis;
6. Risk Profiling;
7. Formulating a Risk;
8. Enrichment Activity: Discussion and Consultation – Architecture Risk Analysis;
9. Enrichment Activity: Guest Lecturer – Information Systems Risk Management;
10. Risk Exposure Factors;
11. Security Controls and Services;
12. Risk Evaluation and Mitigation Strategies;
13. Reports and Consulting; Risk Assessment Techniques.