IBE321 Information Security and Risk Management (Autumn 2023)

About the course

Security concepts and principles. Cryptography basics. User authentication. Malware. Principles of security design. Access control. Threats and vulnerabilities assessment. Risk assessment and management. Intrusion detection and incident response. Forensics. Accountability. Security and privacy.

The course is connected to the following study programs

• Individual Study Courses/Part- time studies
• Bachelor in IT and Digitalization
• Exchange programme - Bachelor's level

Recommended requirements

Basic knowledge of computer programming and networking is recommended.

The student's learning outcomes after completing the course

After completion of the course, the student will have acquired the following learning outcomes, defined as knowledge, skills and general competency:

Knowledge

• has general knowledge on different types of malware and how the CIA properties of the information can be compromised and have an overview of relevant categories of unwanted incidents.
• understands fundamental security concepts such as confidentiality, integrity and availability, authorization, authentication and accountability.
• has general knowledge on security design principles.

Skills

The student:

• is able to implement effective countermeasures against different attacks such as viruses, worms, phishing, ransomware, and eavesdropping.
• can formulate security policies and perform a risk assessment.

Competence

• can contribute to the ICT security posture of an organization.

Forms of teaching and learning

You have for each week:

• 2 hours of recording video lectures
• 2 lecture hours with lecturer
• 2 lab hours with Teaching Assistants or lecturer

Interactive practice lessons are planned where the students will develop activities together with the lecturer. In these lessons, the theory is illustrated and exemplified, so it is assumed that the student has knowledge of the associated theory in advance through the subject material. In the labs the students will have the opportunity to put into practice what they have learned in class, with the guidance of the Teaching assistants. 

It is recommended that students show up in the classroom or digitally when the practice lessons are held.

Coursework requirements - conditions for taking the exam

• Mandatory coursework: Assignment(s)

• Courseworks given: 4

• Courseworks required: 4

• Presence: Not required

• Comment:

Examination

• Form of assessment: School assessment

• Proportion: 100%

• Duration: 4 hours

• Grouping: Individual

• Grading scale: Letter (A - F)

• Support material: Only general dictionary in mother tongue/Norwegian/English in paper version

Syllabus

Pensumoversikt

• IBE321 Information Security and Risk Management