Table of contents

The course is connected to the following study programs

Teaching language

English

Learning outcomes

After successful completion of the course, the students will:

  • have a thorough understanding of SOC and its roles as well as its importance for cybersecurity operations at individual, organizational and societal levels.
  • have a thorough understanding of core components of SOC environments (organizational and technical).
  • have advanced knowledge of tools and methods for situational awareness in cybersecurity operations and inter-organizational collaboration.
  • be able to analyse and evaluate related emerging trends, such as technologies and frameworks for automation and orchestration of security operations.
  • be able to apply threat intelligence lifecycle and threat hunting models and/or tools to detect anomalies and inform response strategies.
  • be able to apply common methodologies for security operations. such as threat and vulnerability management, and reporting.

Contents

The course covers key aspects of effective cybersecurity operations at individual, organizational and societal levels. This includes dominant frameworks and tools for successfully managing security operations in an organization. While the key focus of the course is on management approaches to security operations, the course will also familiarize students with basic adverse techniques.

Teaching and learning methods

The course is given as seminars including lectures, exercises, and group work. Parts of the course, to meet the examination requirements, are compulsory. Detailed information is provided in Canvas at the start of the semester. The estimated workload is 270 hours.

Examination requirements

Approved mandatory presentations and submissions. Mandatory participation in group discussions and presentations. More detailed information is provided in Canvas at the start of the semester.

Examinations

Portfolio assessment is organized as case analysis (70%) and individual reflection (30%), graded assessments, A-F. More information on what will be included in the portfolio will be given at the start of the semester in Canvas. There is no postponed examination in this course.

Reduction of Credits

This course’s contents overlap with the following courses. A reduction of credits will occur if one of these courses is taken in addition:

Course Reduction of Credits
IS-426 – Communication and Teamwork in Cyber Security. 7.5
Last updated from FS (Felles studentsystem) Oct. 15, 2026 2:56:12 PM