Course content

• Introduction to Information security strategy and policy management
• Cultural, organizational and behavioral theories used in information security management organizations.
• Legal and ethical aspects of information security and privacy management.
• Overview of current information security management standards and practices
• How to develop a security program
• Introduction to assessing and treating risk: Threat and vulnerability modelling
• Management models and management practices
• Contingencies and maintenance of Information security
• Information security planning and incident management

Learning outcome

Knowledge:

The candidate possess through knowledge of the fundamental theories, models practices of information security management for both large and small organizations. The candidate possess insight and understanding of ethical and legal aspect information security management and privacy management. The candidate possesses good understanding of the risk management processes. The candidate possesses good understanding of security planning and incident management process. The candidate possess insight and good understand of security awareness and security escalations issues in information security management work. The candidate possess insight of the technological innovation process in IT security and its effect on security management. The candidate possess basic knowledge of the standards in information security management.

Skills:

The candidate is capable of analyzing existing theory, models and methods in the field of information security management and work independently on solving theoretical and practical problems. The candidate is capable of applying his/her knowledge to both modeling the potential problems and the solutions in information security management and be able to communicate this problems and solutions using basic theoretical skills. The candidate is capable of using and the basic terminology and is aware of the basic standards used in the area of information security management.

General competence: Can participate in group work and manage different organization roles of information security management.

Learning methods and activities

See Norwegian version

Compulsory assignments

• Multiple choise-test
• Crisis Management Excersise
• Risk Analysis

Specific conditions

Required previous knowledge

See Norw. version

Course materials

See Norwegian version

Credit reductions