Cyber security managementLaajuus (3 cr)

Objective

-Student understands the meaning of cyber security for customers, business and society.
-Student is able to recognize the assets which are needed to achieve the business goals of the organisation and is able to identify the most common types threats.
-Student is able to identify risks and make decisions to mitigate them. Student is capable to design an information security management system for a small business.

Content

-What cyber security is?
-Actors in the cyberspace
-Attack vectors
-Influencing by information
-Information security
-Information classifying
-Information security system: information security policy, risk management, business continuity.

Qualifications

Basic understanding of corporate strategy and business goals. Basic knowledge of internet and information systems is recommended. Most of the source material is available in English.

Assessment criteria, satisfactory (1)

5 - Student has knowledge of terminology used in cybersecurity and information security field and knows relationships between them. Student is able to create an information security system for small business and analyse decisions and justify them during process and is able to improve the system continuously.
.

4 - Student has knowledge of terminology used in cybersecurity and information security field and knows relationships between them. Student is able to create an information security system for small business and analyse decisions made during process and is able to improve the system continuously.

3 - Student has knowledge of terminology used in cybersecurity and information security field and knows relationships between them. Student is able to create an information security system for small business and analyse decisions made during process.

2 - Student is able to define most common terms used in the cybersecurity and information security field and is able to apply to them create an information security system for small business.

1 - Student is able to define most common terms used in the cybersecurity and information security field. Student is also able understand main components of the information security system and what is their meaning for business continuity.

0- Student is not able to fulfil the requirements for passing the course.