Information and Cyber Security Management (10 cr)

Learning outcomes

The student is able to:
- define information and cybersecurity compliance requirements, best practices and apply those
- assess and manage information and cybersecurity risks
- apply administrative, operational, technical and physical procedures*
- plan, assess and develop information and cybersecurity

*The learning outcome has been modified and verb changed. Earlier verb was "create". The change comes into effect on January 1, 2025.

Location and time

Times and dates of teaching are in Pakki.

Independent studying is possible starting from 12th of January. On the same day, students will be given information about preparations for thef first contact day (22nd of January 2021)

As per the degree regulations, accepting your place in the study unit requires presence in the first session or an appropriate announcement of your absence in advance.

Materials

Latest at the start of each theme the relevant study materials are presented (themes can be found in Content and scheduling)

The development assignment requires at least the correct use of professional concepts and background theory.

The exam focuses on knowledge of relevant legislation and regulations.

Materials created by teachers (copyright holders) are licensed CC-BY-NC-SA unless otherwise noted.

Teaching methods

The study unit includes a development assignment in groups as well as contact- and online studies.

Communication of study unit will be handled via a MS Teams group created for all participants. Private messages to teachers should be handled via email.

As per the current Corona instructions, contact days in spring 2022 will be held normally.

Employer connections

The study unit uses working life experts.
The development assignment is project-based and based on working life requirements.

Exam schedules

-First contact session, accepting place in study unit and handing out of development assignment: 21st of January
-Return of development assignment: 22.5
-Online exam must be completed: 9-11.5.
-1st exam retake: 23.5-25.5
-2nd exam retake: 6-8.6
(Incomplete or skipped exams count as one attempt, except for force majeure-cases handled separately)

International connections

Study unit is implemented in English using international sources.
Study unit is attended by exchange students.

Completion alternatives

The following are possible:
-Recognition of Prior Learning (requires a competence analysis and a demonstration of competence)
-Work-based Learning (requires a working life partner or workplace)
If you wish to propose either of these, please be in touch with the responsible teacher as soon as possible after enrolling.

Student workload

Attendance in all contact sessions is recommended.
Students should prepare for following workload (calculated as a maximum; prior learning can lower the workload)
-Workload total is 10 credits = 270 hours, everything included.
-Implementation lasts 16 weeks. Students should book on average 16-17 hours every week after the study unit begins.
-New subjects and materials are presented every 4-5 weeks, split into themes.
Assessment of hourly workloads:
-Contact teaching physicall 24 hours and contact sessions online 4 hours
-Online studying and independent study online/with distributed materials incl. portfolio 90 hours
-Group work on development assignment and guidance 110 hours
-Exam and preparation for it (independent study) 42 hours

Content scheduling

Teaching has been divided into four themes. Every theme includes contact teaching and online studies. The teaching progresses mainly in the order of the themes below.
The exam that will be completed at the end of the study unit has questions from every theme.
- Theme 1: Information Security Management
- Theme 2: Personnel Security
- Theme 3: Cybersecurity Management
- Theme 4: Physical Security

Evaluation scale

H-5

Qualifications

Before enrolling to this study unit, you should have adequate competence of safety, security and risk management, which you can acquire for example by completing study unit HT00BN79/ HT00CC30 Basics of Corporate Safety, Security and Risk Management (10 cr) or TO00BS57 Basic Theory of Corporate Safety, Security and Risk Management (5 cr).

Further information

IMPORTANT! Read carefully! If anything below is unclear, please be in touch with the responsible teacher.

1. Before enrolling to this study unit, you should have adequate competence of safety, security and risk management, which you can acquire for example by completing study unit HT00BN79 Basics of Corporate Safety, Security and Risk Management (10 cr) or TO00BS57 Basic Theory of Corporate Safety, Security and Risk Management (5 cr) at Open University of Applied Sciences

2. Those enrolling are recommended to have completed the study unit Information- and Cybersecurity 5 cr, or have the relevant knowledge. This study unit does not cover the basics of issues.

3. Quota for Open University of Applied sciences Students is 5 places.