Study Guide

Learning outcomes

The student is able to
- recognize the need to develop information security
- plan, implement and document an information security development project for an organization
apply the practices and techniques of project management

Teaching methods

Working method includes project work in teams or individually. A clearly defined process is given on how to run the project. Conducting an information security project develops the students’ skills in planning, developing and managing information security in a target organisation.
Possible tracks:
•Track-1: The team makes research work in one Lurea's research, development and innovation (RDI) project
•Track-2: The team obtains a target organization and applies information security in real environment
•The team or indivual researcher follows project framework (PMBOK) and uses provided project document templates
•The team or individual researcher applies selected information security framework with chosen context
•The result of the project is the deliverables (for example: demonstrable technical solution, final project report or research paper) that demonstrate the results in appropriate manner
•The team or individual researcher will report their progress with team diary
•Team or individual researcher will present their results at the end of the study unit in a seminar

Location and time

Contact meetings
22.1.2020 9:00 - 11:30 (orientation)
29.1.2020 9:00 - 11:30 (recap questions workshop)
19.2.2020 9:00 - 11:30 (project plan workshop)
1.4.2020 9:00 - 11:30 (mid workshop)
6.5.2020 9:00 - 11:30 (final seminar)

Learning materials and recommended literature

Recommended preliminary studies: R0318 Introduction to Information Security, R0319 Information Security Management or equivalent knowledge

Alternative completion methods of implementation

The student team makes research work in one Lurea's RDI project, or
The team obtains a target organization and applies information security in real environment

Co-operation with working life and/or RDI

The student team makes research work in one Lurea's RDI project, or
The team obtains a target organization and applies information security in real environment.

Important dates

Contact meetings: see above
Deadline of final reports: 31.5.2019

Forms of internationality

Most Laurea's research, development and innovation projects are international ones.

Students workload

5 cr / 137,5 hours student work -> about 8 hours student work/week

Further information for students

The study unit relates to student’s development in applying information security competence. Students develop their skills in project managament, risk assesment, risk control and oral/written communication.
Study unit targets:
•The student is able to recognize research gap and research focus
•The student is able to apply chosen information security framework in the project work
•The student is able to identify the most significant information security risks in the target organization
•The student is able to find needed controls for identified information security risks
•The student is able to present the results of the project both in writing and orally
•The student is able to work in the project
•The student is able to compose a project plan
•The student is able to compose a WBS (work breakdown structure)
•The student is able to plan resource allocation
•The student is able to compose project updates and report frequently
•The students is able to present project results to other groups
•The student is able to use project management tool
•The student is able to make both self and peer-to-peer evaluation
•The students is able to work independently and within team to reach required solutions

Grading scale

H-5

Evaluation methods and criteria

Evaluation is based on point gain during the study unit
Evaluation Objects and Points:
Recap questions: 0-10 points
Project plan: 0-10 points
Research results: 0-70 points
Final seminar presentation: 0-10 point
Project management and team work: 0-5

Total: 105

Evaluation criteria, approved/failed

Point gain -> Grade
0-49 -> 0
50-59 -> 1
60-69 -> 2
70-79 -> 3
80-89 -> 4
90-105 -> 5

Evaluation criteria, satisfactory (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Evaluation criteria, good (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Evaluation criteria, excellent (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development