Information Security Risk Management (5 op)

Arviointiasteikko

H-5

Sisällön jaksotus

- The basic principles of information security risk assessment and risk management
- Information security risk management standard ISO/IEC 27005:2008
- Information security risk assessment methods and best practices
- Practical work

Tavoitteet

After completing the course the student can:
- explain the basic principles of information security risk assessment and risk management
- list the phases of information security risk management process
- classify information security risks by applying different approaches
- give examples of different information security risk assessment methods
- organize and conduct information security risk assessment to an SME sector enterprise or similar size organization
- analyze the results of information security risk assessment
- give justified improvement proposals to mitigate information security risks.

Sisältö

- The basic principles of information security risk assessment and risk management
- Information security risk management standard ISO/IEC 27005:2008
- Information security risk assessment methods and best practices
- Practical work

Oppimateriaalit

Material will be published in Itslearning.

Tenttien ajankohdat ja uusintamahdollisuudet

Course has an exam.

Opiskelijan ajankäyttö ja kuormitus

Lectures 16h
Assignments and practical work 119h

Arviointimenetelmät ja arvioinnin perusteet

Grade will be composed of:
60% Project
20% Personal Assignments
20% Exam.

Hylätty (0)

<50% of project, assignment and exam points.

Arviointikriteerit, tyydyttävä (1-2)

>=50% of project, assignment and exam points. Each part must get a passing grade.

Arviointikriteerit, hyvä (3-4)

>=70% of project, assignment and exam points. Each part must get a passing grade.

Arviointikriteerit, kiitettävä (5)

>=90% of project, assignment and exam points. Each part must get a passing grade.