Tietoturvallisuus palvelunhallinnassa (3 cr)

Evaluation scale

0-5

Objective

The student masters in practice the most essential areas related to cyber security: terminology, utilized technical implementation methods and general principles of services management. The student is able to apply the information to practical information security design and implementation in services management.

Content

Central topics in the course are ISO2700x standard and other relevant frameworks as well as their most essential control processes, such as configuration management, security incident management, asset, threat and risk management.

Materials

Material distributed by the lecturer: presentation material, links to online materials

Completion alternatives

Course assignment covering all course content 100%

Student workload

o face-to-face studies 36 h o independent work including course assignment36 h

Assessment criteria, satisfactory (1)

Excellent 5: The student is able to picture the significance and content of information security in the context of service management outstandingly. The student is able to design management concept for information secured service almost without guidance concerning all essential sections. The student reflects on their own learning realistically.

Very good 4: The student is able to understand the significance and content of information security in the context of service management. The student is able to design an information secure service management concerning all necessary sections. The student is able to reflect on their own learning.

Good 3: The student is able to understand the significance and content of information security in the most common context of service management. The student is able to design an information secure service management including the most relevant processes. The student is partly able to reflect on their own learning.

Satisfactory 2: The student is able to understand the significance and content of information security in the context of most essential service processes. The student is able to design the most essential processes in management of information secure service in a group.

Sufficient 1: The student can partly understand the significance and content of information security in the context of some service processes. The student can design some management processes of information secure service in a group when assisted.

Fail 0: The student does not meet the criteria set for the course.

Qualifications

Basics of Cyber security

Further information

Standards and guidelines utilized in lessons: ISO2700x, SANS, ISO3100, Katakri, Vahti ja NIST.