Study Guide

Learning outcomes

The student is able to:
- define information and cybersecurity compliance requirements, best practices and apply those
- assess and manage information and cybersecurity risks
- apply administrative, operational, technical and physical procedures*
- plan, assess and develop information and cybersecurity

*The learning outcome has been modified and verb changed. Earlier verb was "create". The change comes into effect on January 1, 2025.

Teaching methods

This is a blended learning implementation. Before enrolling to this study unit, student should have adequate competence of safety, security and risk management, which you can acquire for example by completing study unit HT00BN79 Basics of Corporate Safety, Security and Risk Management (10 cr) or TO00BS57 Basic Theory of Corporate Safety, Security and Risk Management (5 cr) at Open University of Applied Sciences

A Canvas learning environment is used to support the implementation. The study unit includes scheduled teaching and guidance both on campus and online. Online teaching is recorded. Contact lessons are not recorded or streamed.

The study unit includes working in groups. You will receive individual feedback for assignments from the teacher. Working life or peer feedback may also be utilized. Course also includes self-study material and pre-recorded lectures.

The study unit consists of one learning assignment done in the groups of 4-6 students, an individual exam and an individual assignment.

The study unit’s evaluation is described in “Evaluation methods and criteria”.

Location and time

Times and dates of teaching are in Pakki. The dates are on the contact days of blended learning in this study programme.

As per the degree regulations, accepting your place in the study unit requires presence in the first session or an appropriate announcement of your absence in advance.

Learning materials and recommended literature

The development assignment requires at least the correct use of professional concepts and background theory. Study materials presented will be in Canvas. Study materials by teachers are licensed as CC-BY-NC-SA onless otherwise noted.

The exam focuses on knowledge of relevant legislation and regulations.

Alternative completion methods of implementation

If you have completed equivalent studies at the same extent previously at a university, contact your head of student affairs.

Demonstrating previously acquired competence: Every student has the right to show their competence. The recognition takes place at the student's initiative. The evaluation of a demonstration is done using the same evaluation criteria and, as a rule, the same evaluation scale as the corresponding course or module.The student is the right to apply for recognition of acquired competence at any time, where, how and when the competence was acquired. The student can also apply for the recognition of expertise acquired at work. The student is responsible for determining and verifying competence requirements and providing necessary information. Recognition previously acquired competence takes place before the start of the study period. The student must complete a competence analysis and registers for a demonstration event.

If your competence partially corresponds to the competence of the study course, talk to the responsible teacher of the study course. They can assess your skills and guide you forward. Read more in the Canvas workspace for demonstration of competence.

Co-operation with working life and/or RDI

The study unit uses working life experts.
The development assignment is project-based and based on working life requirements.

Important dates

-First contact day 16th of January 2025
According to the degree regulations (section 19) “Students must be present for the first contact teaching session, or they must notify the responsible teacher of their absence to confirm they intend to participate in the study unit. Their enrolment will be rejected, if the student does not notify the teacher of being absent from the first contact teaching session or the reason for their absence cannot be considered justified. Another student may be selected in their place.”

Other important dates:
-Return of development assignment: 18.5

Forms of internationality

Study unit is implemented in English using international sources.
Study unit is suitable for exchange students.

Students workload

Attendance in all contact sessions is recommended.
Students should prepare for following workload (calculated as a maximum; prior learning can lower the workload)
-Workload total is 10 credits = 270 hours, everything included.
-Implementation lasts approximately 18 weeks. Students should prepare for on average 15 hours of study time every week after the study unit begins.
-New subjects and materials are presented every 4-5 weeks, split into themes.
Assessment of hourly workloads:
-Contact teaching physicall 24 hours and contact sessions online 4 hours
-Online studying and independent study online/with distributed materials incl. portfolio 90 hours
-Group work on development assignment and guidance 110 hours
-Exam and preparation for it (independent study) 42 hours

Content and scheduling

Teaching has been divided into four themes. Every theme includes contact teaching and online studies. The teaching progresses mainly in the order of the themes below.
The exam that will be completed at the end of the study unit has questions from every theme.
- Theme 1: Information Security Management
- Theme 2: Personnel Security
- Theme 3: Cybersecurity Management

Further information for students

1. Before enrolling to this study unit, you should have sufficient competence in safety, security and risk management, by completing e.g. study units HT00BN79 Basics of Corporate Safety, Security and Risk Management (10 cr) or the open UAS study unit Basic Theory of Safety, Security and Risk Management.

2. Those enrolling are recommended to have completed the study unit Information- and Cybersecurity 5 cr, or have the equivalent knowledge otherwise. This study unit does not cover the basics of topics.

3. Quota for Open University of Applied sciences Students is 5 places.

Grading scale

H-5

Evaluation methods and criteria

In this study unit the assessing of the competences will be done by using the criteria set for requirement level 2.

The grade of the study unit is determined as the weighted overall result of three assessed implementation parts.

The implementation parts to be assessed are:
-Development assignment in groups: 40% of grade
-Individually completed diary assignment: 30% of grade
-Individually completed online exam: 30% of grade

Online exam is evaluated based on points score. More information on this and evaluation of other implementation parts can be found in the grading scale, below.

Schedule of assessment: each implementation part will be graded within four weeks of the last possible completion date, but the entire study unit must be graded withing three weeks of the end of the study unit.

Evaluation criteria, fail (0)

One or more of the implementation parts is missing.
One or more of the implementation parts does not fulfill the criteria of Satisfactory (1-2).

Evaluation criteria, satisfactory (1-2)

A satisfactory (1) exam result has 50-59% of maximum score.
A satisfactory (2) exam result has 60-69% of maximum score.

The development assignment and portfolio assignment graded Satisfactory (1), if the student (or group):
-Follows the given assignment
-Uses professional concept consistently
-Shows that they have familiarized themselves with the knowledge base
-Is able to report and communicate professionally
-Is able to act independently taking into account the operating environment

The development assignment is graded Satisfactory (2), if the assignment or group fulfills the above criteria and in addition some of the criteria of Good (3-4).

Evaluation criteria, good (3-4)

A good (3) exam result has 70-79% of maximum score.
A good (4) exam result has 80-89% of maximum score.

The development assignment is graded Good (3), if the student (or group):
-Follows the given assignment
-Critically evaluates information and justify their actions with science-based knowledge
-Proposes professional, creative solutions
-Is able to report and communicate professionally
-Is able to act independently taking into account the operating environment
The development assignment is graded Good (4), if the assignment or group fulfills the above criteria and in addition some of the criteria of Excellent (5)

Evaluation criteria, excellent (5)

An excellent (5) exam result has 90-100% of maximum score.

The development assignment is graded Excellent (5), if the student (or group):
-Follows the given assignment
-Analyses the acquired information, draws conclusions and combines theoretical knowledge with experiential knowledge
-Proposes professional, creative solutions
-Evaluates the applicability of produced knowledge, skill or idea to other contexts as well as their impact
-Is able to report and communicate professionally
-Is able to act independently taking into account the operating environment

Qualifications

Before enrolling to this study unit, you should have adequate competence of safety, security and risk management, which you can acquire for example by completing study unit HT00BN79/ HT00CC30 Basics of Corporate Safety, Security and Risk Management (10 cr) or TO00BS57 Basic Theory of Corporate Safety, Security and Risk Management (5 cr).

Further information

The study unit is assessed using requirement level 2 of Laurea's common evaluation criteria.