Table of contents

The course is connected to the following study programs

Teaching language

English

Recommended previous knowledge

It is recommended that the students have passed the following courses, or have gained similar knowledge otherwise:

  • IS-429 Human and Social Aspects of Cybersecurity
  • IS-430 Cybersecurity Architecture
  • IS-431 Ethics, Legislation, and Compliance for Cybersecurity
  • IS-432 Security Operations
  • IS-509 Strategy and Governance of Cybersecurity
  • IS-510 Secure Software Development and Project Management

Learning outcomes

After successful completion of the course, the students will be able to:

  • analyse, evaluate, and apply core concepts across domains of:

    • Security and risk management
    • Asset security
    • Security architecture and engineering
    • Communication and network security
    • Identity and Access Management (IAM)
    • Security assessment and testing
    • Security operations
    • Software development security
  • evaluate the role of professional certifications in cybersecurity career development
  • compare and differentiate major cybersecurity certifications (e.g., CISSP, CISM, Security+, CEH) in terms of scope, audience, governance model, and professional positioning
  • assess eligibility requirements, experience criteria, ethical obligations, and examination structures associated with major cybersecurity certifications

Contents

This course provides a comprehensive overview of cybersecurity topics aligned with the ISC2 Certified Information Systems Security Professional (CISSP). The contents span the full breadth of the field from security and risk management to physical and environmental security and to communications and network security.

The course may serve as preparation for the CISSP certification examination. However, the course does not provide any actual professional certification. Instead, it offers a structured academic framework and learning environment to support students who wish to pursue certification independently. The course is highly relevant for all students seeking careers in cybersecurity, regardless of whether they intend to sit for the official professional certification.

Teaching and learning methods

The course relies on self-studying. The learning is supported by group seminars with discussions and exercises. The estimated workload is 270 hours.

Examination requirements

Participation in group seminars.

Examinations

3-hour written exam. Graded A-F.

Student evaluation

The person responsible for the course decides, in cooperation with the student representative, the form of student evaluation and whether the course is to have a midway or end of course evaluation in accordance with the quality system for education, chapter 4.1.
Last updated from FS (Felles studentsystem) Oct. 15, 2026 2:29:14 PM