Objective
The objective of the course is to explain the need for effective security management, to identify the problems associated with security management and to consider ways in which these problems can be solved.
Upon completion of this course, the students will be able to:
- Understand and evaluate security management requirements against international standards.
- Analyse business continuity requirements and formulate a business continuity plan.
- Design an incident reporting scheme in an organization.
- Understand the process of security evaluation of systems and products according to international standards.
- Appreciate the economic consequences of treating risk.
- Understand in detail current identity management technology.
- Understand different approaches and the workings of different ways of measuring security.
Course Contents
- Information Security Management Systems.
- Business Continuity.
- Incident reporting.
- Evaluation and assurance of security systems and products.
- Security economics.
- Identity management.
- Security metrics.
- Acquisti, S. Gritzalis, C. Lambrinoudakis, S. De Capitani di Vimercati (Eds.) (2008): Digital Privacy: Theory, Technologies and Practices, Auerbach Publications.
- S. Furnell (2005): Computer Insecurity, Springer.
- ISO 27000 series of standards.
- S. Furnell, S. Katsikas, J. Lopez, A. Patel, (2008): Securing Information and Communications Systems, Principles Technologies and Applications, Artech House.
- J. Vacca (2013): Computer and Information Security Handbook, Morgan Kaufmann.
- Scientific papers, notes and/or books that will be recommended