Security Management

Summary of module for applicants:

This module will provide the core theoretical background necessary for ensuring security of information systems. The module aims to extend the student's knowledge of systems and risks management and to identify the problems associated with security management and expand their ability to better manage security vulnerabilities and integrate security management with the rest of IT management. It provides practical experience of auditing information systems for adequate information security based on industry specific standards.

Main topics of study:

• Security concepts: goal, asset, vulnerability, threat , risks, security requirements, security mechanism, policy 
• The Integrated approach to security management
• Strategic information security planning and management
• Classification, problems, and issues facing security management
• Information security risk management framework
• Information security management system standard and audit
• Security policy

Learning Outcomes for the module

• Digital Proficiency - Code = (DP)
• Industry Connections - Code = (IC)
• Emotional Intelligence Development - Code = (EID)
• Social Intelligence Development - Code = (SID)
• Physical Intelligence Development - Code = (PID)
• Cultural Intelligence Development - Code = (CID)
• Cognitive Intelligence Development – Code = (COI)
• Community Connections - Code = (CC)
• UEL Give-Back - Code = (UGB)

At the end of this module, students will be able to:

Knowledge

1. Critically analyse models and frameworks for security management in relation to current security issues and concerns in computing and network environments

2.  Demonstrate an in-depth understanding of a comprehensive risk management practice for ensuring overall security

Thinking skills

3. Critically evaluate security threats and vulnerabilities and suggest model solutions  (COI)

4. Critically assess the principles and characteristics of the security management framework (COI)

Subject-based practical skills

5. Conduct an audit based on industry specific standard and summarize the audit results (DP)

Skills for life and work (general skills)

6. Critically develop and evaluate information security policy and assess for the effectiveness and improvement of information systems security (EID)