IS-429 Human and social aspects of cybersecurity (Autumn 2025)

After successful completion of the course, the students will:

• have advanced knowledge of the role of human behavior and social structures on organizational cybersecurity and the related theories.
• be able to analyze and differentiate between the various theoretical frameworks and models discussed in the course, such as deterrence theory and fear appeal frameworks, in the context of cybersecurity.
• be able to valuate organizational security behavior and culture to identify organizational cybersecurity issues.
• be able to design a comprehensive plan or strategy for enhancing cybersecurity in an organization, integrating concepts like security policy compliance, deterrence, and organizational culture studied in the course.

This course delves into the human and social dimensions of cybersecurity. By exploring a range of theories, the course examines the complex interplay between human behavior, organizational culture, and cybersecurity policy compliance. Students will learn how human factors and social structures influence the effectiveness of cybersecurity measures within organizations. During the course, we will draw on case studies and reports to apply frameworks and theories to analyze challenges on security behavior.

The course exam is a portfolio (individual grade) consisting of two types of assignments: Group assignments (70% of the grade). Individual assignments (30% of the grade). Details on the assignments will be published in Canvas. Graded assessment, A-F. There is no postponed examination in this course.