Information- and Cybersecurity Management (10 cr)

Learning outcomes

The student is able to:
- define information and cybersecurity compliance requirements, best practices and apply those
- assess and manage information and cybersecurity risks
- apply administrative, operational, technical and physical procedures*
- plan, assess and develop information and cybersecurity

*The learning outcome has been modified and verb changed. Earlier verb was "create". The change comes into effect on January 1, 2025.

Location and time

Times and dates of contact teaching (blended learning students) are in Pakki.
For blended learning students, study unit begins with contact session 31.1.2020. According to the degree regulations, accepting your place in the study unit requires presence in the first session or an appropriate announcement of your absence.
Some of the contact sessions may be arranged outside of campus.

Materials

Latest at the end of each theme the relevant study materials are presented (themes can be found in Content and scheduling)
The development assignment requires at least the knowledge of professional concepts and background theory.
The exam focuses on knowledge of relevant legislation.

Teaching methods

This implementation is both for blended learning- and online classes. Full-time students should enroll to implentation TO00BN70-3001. (That implementation does have common contact sessions with this implementation)

The study unit includes a development assignment in groups as well as contact- and online studies.

Communication of study unit will be handled via Optima workspace message boards. Private messages to teachers should be handled via email.

Employer connections

The study unit uses working life experts.
The development assignment is project-based and based on working life requirements.

Exam schedules

-Blended learning students: first contact session, accepting place in study unit and handing out of development assignment: 31.1.2020
-Online students: accepting place in study unit by attending webinar 31.1.2020 or by message (separate instructions during January 2020)
-Return of development assignment: latest 17.5.2020
-Online exam must be completed between 18.5-20.5.2020.
-1st exam retake between 8.6-10.6.2020.
-2nd exam retake between 29.6-1.7.2020.
(Incomplete or skipped exams count as one attempt, except for force majeure-cases handled separately)

International connections

Study unit is implemented in English using international sources. Study unit is attended by exchange students.

Completion alternatives

-Recognition of Prior Learning
-Work-based Learning
If you wish to propose either of these, please be in touch as soon as possible after enrolling.

Student workload

Attendance in all contact sessions is recommended.
Students should prepare for following workload:
-Workload total is 10 credits = 270 hours, everything included.
-Implementation lasts 16 weeks. Students should book on average 16-17 hours every week after the study unit begins.
-New subjects and materials are presented by themes on weeks 5, 9, 12 and 16. Every theme is taught for 4-5 weeks.
Assessment of hourly workloads:
-Blended learning students: Contact sessions 36 hours
-Online studying and independent study online/with distributed materials 72 hours (blended learning); 108 hours (online learning students)
-Group work on development assignment and guidance 113 hours
-Exam and preparation for it (independent study) 49 hours

Assessment criteria, approved/failed

Exam is rejected if point score is below 50% of maximum score.

Development assignment is rejected if:
-The assignment results differ significantly from the one given
-The use of professional concepts is severely lacking
-Knowledge base is used little or none at all
-The end product is unclear or unprofessional
-The group and/or student is unable to act independently

Content scheduling

Teaching has been divided into four themes; in addition, the starting session has general information and introduction.
Every theme has two contact sessions, partly connected to the development assignment that covers all themes. In addition every theme includes online studies. The exam that will be completed at the end of the study unit has questions from every theme.
Themes, approximate timing and notes:
- Theme 1: Information Security Management | Weeks 5-9 | Student that has completed the study unit Information Security Management previously is exempted from contact sessions and exam questions on this theme.
- Theme 2: Personnel Security | Weeks 9-12 | Student that has completed the study unit Occupational Safety and Personnel Security previously is exempted from contact sessions and exam questions on this theme.
- Theme 3: Cybersecurity Management | Weeks 12-16 | Student that has completed the study unit Cybersecurity previously is exempted from contact sessions and exam questions on this theme.
- Theme 4: Physical Security | Weeks 16-20 | Student that has completed the study unit Physical Security previously is exempted from contact sessions and exam questions on this theme.
-Return of development assignment: latest 17.5.2020
-Online exam must be completed between 18.5-20.5.2020.
-1st exam retake between 8.6-10.6.2020.
-2nd exam retake between 29.6-1.7.2020.

Evaluation scale

H-5

Qualifications

Before enrolling to this study unit, you should have adequate competence of safety, security and risk management, which you can acquire for example by completing study unit HT00BN79/ HT00CC30 Basics of Corporate Safety, Security and Risk Management (10 cr) or TO00BS57 Basic Theory of Corporate Safety, Security and Risk Management (5 cr).

Further information

IMPORTANT! Read carefully! If anything below is unclear, please be in touch with the responsible teacher.

1. Before enrolling to this study unit, you should have adequate competence level of safety, security and risk management, which you can acquire for example by completing study unit Business Continuity Planning 5 cr or Basics of Corporate Security and Risk Management 10 cr.

2. Those enrolling are recommended to have completed the study unit Introduction to Information- and Cybersecurity 5 cr, or have the relevant knowledge. This study unit does not cover the basics of issues.

3. Some studies in the previous curriculum (2019 and before) affect the extent and content of this study unit.
If you have completed one of the study units below, the extent is 5 cr.
If you have completed two or more of the study units below, do not enroll to this study unit at all.
- Fyysinen turvallisuus / Physical Security
- Työ- ja henkilöstöturvallisuus / Occupational Safety and Personnel Security
- Information Security Management
- Cybersecurity
Members of project groups must have the same extent and content, because earlier completions affect the assignment!

4. Quota for open university students of 10 places and a quota for 3UAS (3AMK) students of 10 places.