Cyber security management

Module title:

Cyber security management

Module overview:

This course is designed to support students’ transition from practitioner to a managing role. In this module students will learn how to manage processes related to Cyber Security components and rules by which a secure and reliable information system is designed, implemented, and maintained. This module is based on the knowledge and understanding required for a managing role in Cyber Security.

In this module students will learn:

understanding the principles of confidentiality, integrity, and availability (CIA), risk management techniques, and security governance principles.

about information and asset classification, ownership, and protective measures for data security.

knowledge in security models, architecture, and design principles, including cryptographic systems and physical security controls.

network structure, transmission methods, transport formats, and security measures to safeguard communication and network infrastructure.

about the identification, authentication, authorization, and access control mechanisms, including identity federation and privilege management.

designing, performing, and analysing security testing, including vulnerability assessment and penetration testing.

incident management, disaster recovery, and business continuity planning, along with resource protection techniques.

secure coding practices, software development life cycle (SDLC) security, and application security controls.

Literature:

Required readings:
1. Chapple, M., Stewart, J.M. and Gibson, D., (2018). (ISC) 2 CISSP Certified Information Systems Security Professional Official Study Guide. New York: John Wiley and Sons.

Supplementary readings:
1. Warsinske, J., Graff, M., Henry, K., Hoover, C., Malisow, B., Murphy, S., Oakes, C.P., Pajari, G., Parker, J.T., Seidl, D. and Vasquez, M., (2019). The Official (ISC)
2. Guide to the CISSP CBK Reference. New York: John Wiley and Sons.