Study Guide

Objective

After passing the course the student can
- name and explain the basic principles of Information Security
- classify information and information systems
- identify information security threats
- give examples of information security controls and their implementations
- identify and list information security requirements in different kind of organizations taking into account juridical and regulatory requirements
- produce information security policy and plan personnel training to implement the policy
- assess whether there are shortages in security controls’ implementations and give justified recommendations for their improvements
- utilize cryptography and public key infrastructure (PKI)

Content

- The importance of Information Security for different organizations (i.e. business, non-profit, societies)
- Basic principles of Information Security
- Players in the Information Security field (good guys, bad guys)
- Information Security Standards and Best Practices
- The basics of Information Security Risk Assessment and Risk Management
Information security policy and training
- Threats and attack methods facing different organizations, and protection against them
- Basic principles ofencryption and public key infrastructure (PKI)