Information Security Risk Management (5 op)

Arviointiasteikko

H-5

Sisällön jaksotus

After completing the course the student can:

- explain basic principles of ISO/IEC27005:2008 -standard based information security risk assessment and risk management
- explain the basic principles of information security risk assessment and risk management
- list the phases of information security risk management process
- classify information security risks by applying different approaches
- give examples of different information security risk assessment methods
- organize and conduct information security risk assessment to an SME sector enterprise or similar size organization
- analyze the results of information security risk assessment
- give justified improvement proposals to mitigate information security risks.
- Understands information security risk management as part of continuity planning and preparedness

Tavoitteet

After completing the course the student can:
- explain the basic principles of information security risk assessment and risk management
- list the phases of information security risk management process
- classify information security risks by applying different approaches
- give examples of different information security risk assessment methods
- organize and conduct information security risk assessment to an SME sector enterprise or similar size organization
- analyze the results of information security risk assessment
- give justified improvement proposals to mitigate information security risks.

Sisältö

- The basic principles of information security risk assessment and risk management
- Information security risk management standard ISO/IEC 27005:2008
- Information security risk assessment methods and best practices
- Practical work

Oppimateriaalit

Material will be published in Itslearning.

Opetusmenetelmät

- Lectures, assignments and practical work

Tenttien ajankohdat ja uusintamahdollisuudet

Course has an exam.

Opiskelijan ajankäyttö ja kuormitus

Lectures
Assignments and practical work/group work

Arviointimenetelmät ja arvioinnin perusteet

The grade is based on the group assignment, peer assessment, exam, attendance, as well as group and individual self-assessment. The assessment criteria are presented at the beginning of the course and may differ from those outlined here.

The group assignment carries the highest weight in the evaluation. More than 50% absence from in-person classes will result in failing the course. Absences must be discussed with the instructor separately.

Hylätty (0)

<50% of assignment and exam points.
More than 50% absence from in-person classes

Arviointikriteerit, tyydyttävä (1-2)

>=50% of the homework assignments are completed, and 50% of the points are from the exam. Each part must get a passing grade.

Arviointikriteerit, hyvä (3-4)

>=70% of the homework assignments are completed, and 70% of the points from the exam. Each part must get a passing grade.

Arviointikriteerit, kiitettävä (5)

>=90% of assignment and exam points. Each part must get a passing grade.