Information Security Risk Management

Information Security Risk Management, 5 credits - 3011369

Upcoming implementations:

Information Security Risk Management 3011369-3004 10.01.2022-22.04.2022 5 credits (ICTMODictprojSem, ...) +-
Teacher(s) in charge

Mika Koivunen

Learning material

Material will be published in Itslearning.

Objects, timing and methods of assessment

Grade will be composed of:
60% Project
20% Personal Assignments
20% Exam.

Teaching language

Finnish

Timing

10.01.2022 - 22.04.2022

Enrollment date range

01.12.2021 - 20.01.2022
Group(s)
- ICTMODictprojSem
- PTIETS20swis
Seats

0 - 50

Responsible unit

Engineering and Business

Campus

Kupittaa Campus

Assessment scale

H-5

Exam dates and retake possibilities

Course has an exam.

Student's schedule and workload

Lectures 16h
Assignments and practical work 119h

Content scheduling

- The basic principles of information security risk assessment and risk management
- Information security risk management standard ISO/IEC 27005:2008
- Information security risk assessment methods and best practices
- Practical work

Assessment criteria

Failed (0)

<50% of project, assignment and exam points.

Assessment criteria – satisfactory (1-2)

>=50% of project, assignment and exam points. Each part must get a passing grade.

Assessment criteria – good (3-4)

>=70% of project, assignment and exam points. Each part must get a passing grade.

Assessment criteria – excellent (5)

>=90% of project, assignment and exam points. Each part must get a passing grade.

After completing the course the student can:
- explain the basic principles of information security risk assessment and risk management
- list the phases of information security risk management process
- classify information security risks by applying different approaches
- give examples of different information security risk assessment methods
- organize and conduct information security risk assessment to an SME sector enterprise or similar size organization
- analyze the results of information security risk assessment
- give justified improvement proposals to mitigate information security risks.

- The basic principles of information security risk assessment and risk management
- Information security risk management standard ISO/IEC 27005:2008
- Information security risk assessment methods and best practices
- Practical work