Table of contents

The course is connected to the following study programs

Teaching language

English

Recommended previous knowledge

The participants are recommended to have taken two or more of the following courses: Strategy and Governance of Cybersecurity, Cybersecurity Architecture and Ethics, legislation, and compliance for cybersecurity.

Learning outcomes

Upon successful completion of the course, the students will:

  • have advanced knowledge of software development and secure software development methodologies and practices, such as DevOps and DevSecOps
  • have advanced knowledge of the key guidelines for the secure software development
  • have knowledge of secure software design principles and how to apply these principles
  • understand software development project management, e.g., Agile Methods
  • have advanced understanding of security vulnerabilities, requirement and verification guidelines for application security
  • be able to apply secure software implementation and verification guidelines
  • be able to analyse and evaluate the security of software applications and software development processes
  • be able to create secure software development requirements and processes

Contents

The course provides an overview of relevant aspects of secure software development from design, implementation, and verification. During the course we will have several case studies, as well as hands-on examples such as threat modelling, user and abuser story, and other relevant techniques. Moreover, the students will be introduced to the cybersecurity implications of IT Project Management.

Teaching and learning methods

Lectures and seminar discussions with hands-on assignments and group tasks. The estimated workload is 270 hours.

Examination requirements

Compulsory assignments. More detailed information will be provided in Canvas at the start of the semester.

Examinations

Portfolio examination, which includes individual assignment (30%) and group work assignment (70%). Individual grades, A-F. More information on what will be included in the portfolio will be given at the start of the semester in Canvas. There is no postponed examination in this course.

Student evaluation

The person responsible for the course decides, in cooperation with student representative, the form of student evaluation and whether the course is to have a midway or end of course evaluation in accordance with the quality system for education, chapter 4.1.

Reduction of Credits

This course’s contents overlap with the following courses. A reduction of credits will occur if one of these courses is taken in addition:

Course Reduction of Credits
IS-505 – Security Management in IS Development Projects. 5
IS-506 – IS Security Projects. 3
Last updated from FS (Felles studentsystem) Oct. 15, 2026 9:01:02 AM