Course content

Introduction - Secure ICT Operations - Continuing and Further Education Course/Module

The module provides an introduction to the secure operation of ICT systems aimed at employees who work with, or have responsibilities that include, digital security. It covers concepts, frameworks, methods and tools for secure ICT operations. Strong emphasis is placed on familiarising students with key frameworks used in Norway, such as NSM’s Basic Principles for ICT Security (NSMs Grunnprinsipper for IKT-sikkerhet) and recognised international frameworks. Students will become familiar with principles for secure operational processes, system and network architectures, and methods for verifying security.

Background to the programme

Norway has a significant need for more people with competence in digital security, including in ICT-intensive sectors and organisations. As described in the National Digitalisation Strategy 2024-2030, digital security is a prerequisite for successful digitalisation of society. The programme is aimed at strengthening digital security competence in the ICT sector, with a particular emphasis on secure ICT operations. The programme has been developed in collaboration with NTNU and the ICT industry, represented by Indigo-IKT and KulturIT. NSM’s Basic Principles for ICT Security are used as a common thread throughout the programme.

Note: This is an automated translation of the authoritative Norwegian description.

Learning outcome

A candidate who has completed the qualification shall have the following overall learning outcomes, defined in terms of knowledge, skills and general competence:

Knowledge

The candidate:

• Has insight into NSM’s Basic Principles for ICT Security (NSMs Grunnprinsipper for IKT-sikkerhet)
• Has knowledge of important frameworks and resources for digital security
• Has knowledge of key sources of information on vulnerabilities in ICT systems
• Has knowledge of tools for centralised security monitoring
• Has knowledge of the challenges and opportunities that cloud and AI solutions present for ICT security
• Has knowledge of measures for digital security in data networks

Skills

The candidate:

• Is able to use a risk and vulnerability analysis to propose technical measures
• Can use basic tools and methods for mapping ICT infrastructure
• Can make basic use of tools for securing Windows, macOS and Linux
• Can carry out basic log analysis of a distributed and heterogeneous system

General competence

The candidate:

• Is able to familiarise themself with new material relating to secure ICT operations
• Understands how the risk profile of organisations can be affected by the choice of different ICT solutions
• Can communicate the consequences of changes in ICT infrastructure to other roles in the organisation

Note: This is an automated translation of the authoritative Norwegian description.

Learning methods and activities

Physical and digital study sessions with lectures and group work. The course will include two full-day on-campus sessions and six shorter online sessions. Between sessions, students are expected to work independently with digital learning resources, such as lecture videos and practical laboratory exercises in a virtual environment / distributed data lab. The learning resources will be made available in NTNU’s digital learning platform and an adapted cloud solution. The sessions will be a combination of reviewing laboratory exercises completed between sessions and introducing new material.

Laboratory exercises are solved in groups of 2-4 people. Laboratory reports are submitted individually.

The expected workload is:

• Participation in sessions: 22 hours
• Independent work (digital learning resources, laboratory exercises, syllabus literature and compulsory assignments): 90 hours

Exam: 15 hours

Total: 127 hours

Note: This is an automated translation of the authoritative Norwegian description.

Compulsory assignments

• Lab-work report
• Lab-work report
• Lab-work report
• Lab-work report
• Lab-work report
• Lab-work report

Specific conditions

Course materials

To be announced at the start of the course.