Norwegian or English. More information at the start of the semester.
Recommended prerequisites
IS-423 Information Security Policy, Legal Aspects and Ethics
IS-425 Enterprise Systems and Security Architecture
IS-426 Teamwork and Communication
IKT447 Trust, Threats, Risk and Vulnerability
Learning outcomes
After completion of the course, the students are able to
discuss about the importance of strategic information security management in organizations and in societies.
apply central principles and techniques for effective management of information security.
know key concepts of business continuity planning and management and how to apply them in strategic information security management.
understand the role of insiders and their awareness and motivations for strategic security management.
summarize the foundational knowledge on risk analysis and risk management.
explain cultural aspects of information security.
Course contents
The course introduces central aspects of strategic information security management in organizations and societies. The course covers organizing information security in organizations, recruiting and leading competences within information security, and analyzing as well as handling of risks. The course also deals with the relationship between global and cultural aspect for information security.
Teaching methods
The course will be given as seminars consisting of lectures, exersices and group work. Estimated workload is about 210 hours.
Examination requirements
Approved compulsory assignments and presentations, in addition to compulsory attendance in lectures and discussions. More information will be given in Canvas at the start of the semester.
Assessment methods and criteria
Portfolio hand-in. Graded assessment, A-F. Individual grade on the portfolio. More information on what will be included in the portfolio will be given at the start of the semester. There is no postponed examination in this course.
Evaluation
The person responsible for the course decides, in cooperation with student representative, the form of student evaluation and whether the course is to have a midway or end of course evaluation in accordance with the quality system for education, chapter 4.1.