From Cyber Awareness to Resilience (2 cr)

Evaluation scale

Hyväksytty/Hylätty

Content scheduling

Course structure and syllabus:

A. Transversal Concepts (2h online, 4h online learning environment) – Cybersecurity culture and related frameworks and models

Student understands what cybersecurity means within the broader security culture, how it is built within an organization, and why it is essential for information security
• Awareness of cybersecurity threats and risks as part of organizational operations and culture.
• Behavioral change towards best cybersecurity practices.
• Embedding the culture into daily business operations.
• Cultivating a commitment to continuous improvement in cybersecurity.
• Emphasizing cybersecurity responsibilities

B. Core Content (3h online, 10h online learning environment) – Cyber competence and awareness – their importance for the cybersecurity level of an SME

Student understands the importance of increasing information security awareness as part of a security culture and behavior change.
• Through awareness, the understanding of organizational information security roles and the significance of continuous training is enhanced as a result of completing this course.
• The evaluation of different maturity levels of organizations
• Evaluation of the awareness program goals achievement

C. CBL Module (27h online learning environment) offers a comprehensive and engaging way to explore real-world cybersecurity challenges, such as data breaches, malware attacks, and social engineering. The aim is to activate learners, develop critical thinking, and strengthen problem-solving skills in the context of building a security awareness program for an organization. The outcome: participants will be able to apply what they have learned in real-world contexts – for example, by modelling a practical situation from their own organization based on a given task.

D. Guided Reflection and Feedback (1h online, 3h online learning environment) Peer assessment of the practical awareness project produced during the course, teacher-led and/or automated evaluation of assignments completed in the learning environment, participation survey, course feedback survey, and continuous improvement.

Objective

After completing the course, the participant will:
- Understand why security culture is a key component of cybersecurity and how it can be influenced at various levels of the organization.
- Recognize how capability, opportunity, and motivation work together to shape secure behavior.
- Understand the role of communication in building awareness and a strong security culture.
- Be able to assess the maturity level of the organization’s cybersecurity competence and awareness.
- Gain the skills to design and implement a cybersecurity awareness program tailored to the organization's needs.

Content

This course provides practical tools for developing cybersecurity awareness — from assessing the current state to building an effective awareness program. The goal is to support the development of a strong security culture as an integrated part of organizational operations.
The course utilizes security maturity models and behavioural models, which help to understand and guide secure behaviour within the organization.

Materials

Learning material will be provided through the ItsLearning environment.

Exam schedules

There is no separate exam on this course.

Completion alternatives

Not applicable.

Student workload

Online lectures: 6 hours.
Homework assignments between the lectures: 40 hours.
Learning reflection assignments after the final lecture: 4 hours.

Online lectures:
Thursday, September 11th at 16:00-18:00.
Thursday, September 18th at 16:00-18:00.
Thursday, October 30th at 16:00-18:00.
Links to the interactive lectures will be provided through the ItsLearning e-learning environment.

Assessment criteria, approved/failed

Student must successfully complete all assignments and receive at least 70% of the maximum points to pass the course. Assignments must be completed by the deadlines set in the learning environment.

Evaluation methods and criteria

Continuous assessment through learning assignments during online sessions and homework. There is no separate exam on this course.

Qualifications

Attending this course requires a good understanding of fundamental cybersecurity and information security theories, concepts and practices.

Further information

All communication will be through the ItsLearning environment.