Course overview
The course aims to enable students to define and implement the architecture, design, management and controls that assure the security of business environments. The topics include recognition, analysis and assessments of risks, threats, and vulnerabilities, and measures to mitigate them, including implementing a control for a policy using frameworks such as ISO, NIST, ITIL, and CIS. Students will develop a comprehensive understanding of various frameworks, methodologies, and best practices related to information security, enabling them to assess risks, threats, and vulnerabilities effectively and implement appropriate measures to mitigate them.
Course learning outcomes
- Describe the fundamental concepts and principles of information assurance and management
- Identify, assess, and prioritise risks, threats, and vulnerabilities within business environments
- Evaluate different frameworks and standards such as ISO, NIST, ITIL, CIS, etc., and understand their relevance in ensuring information security
- Design, implement, and manage controls, using policy and procedures to safeguard information assets and mitigate security risks effectively
Degree list
The following degrees include this course