Information Security Management (5 cr)

Learning outcomes

The student is able to
- act ethically as a member of study group and community
- comprehend, explain and apply information security program
development and management principles
- comprehend, explain and apply risk management, incident
management and compliance principles
- plan, implement and finalize risk assessment process
- analyze typical information security management related
problems and draw solutions to them
- reflect and develop their own learning process

Materials

- Learning material is based on Certified Information Security Manager (CISM) certification training material
- Video material
- Course book (CISM Exam Guide 2018, Gregory, Peter H.)
- The study unit provides preparatory training for CISM but not certification exam

Teaching methods

- This study unit is fully online learning with the possibilities of volunteer tutoring meetings with the teachers.
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers.
- Virtual studies, weekly basis virtual learning and assignments
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should finish compulsory ICT-studies (TIKO: R0240, R0241 & R0242, BIT: R0277, R0279 & R0280) OR the student should have equivalent competence with the aforementioned study units before enrolling to this study unit

Employer connections

- The study unit may offer expert lecturers

Exam schedules

- Study unit starts on week 35 (preliminary plan)
- Study unit ends on week 45 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Completion alternatives

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence

Student workload

- 5 cr / 137,5 hours
- Study unit will last 11 weeks

Content scheduling

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-4 and from Module-5 to Module-8

Module-0: Induction and Study Plan
Module-1: Info Sec Governance Part 1
Module-2: Info Sec Governance Part 2
Module-3: Information Risk Management-1
Module-4: Information Risk Management-2
Module-5: Info Sec Program Dev Part 1
Module-6: Info Sec Program Dev Part 2
Module-7: Info Sec Incident Man Part 1
Module-8: Info Sec Incident Man Part 2

Evaluation scale

Approved/Failed

Qualifications

TIKO and BIT students: Compulsory ICT-studies
Or equivalent competence.

Further information

- The study unit is prioritized for the students who study cyberseecurity as their major
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after orientation period (the first week of the study unit)