3404366: Risk and security management

Description

• Motivation, Schedule & Introduction
• - Organizational Information Security
• IT Governance / Compliance
• Laws
• Policies
• Standards
• Frameworks
• Controls
• Case of implementing IT-Governance
• Security of Data
• Principles of Data Security
• Creation of Data
• Responsibilities for the Asset Data
• Meta-Data for a Risk Information System
• Protection of Private Data
• Threats and Cases
• Technical Security
• States, Codes and Cardinalities
• Networks
• Computers
• Software

Learning Outcomes

Goals of this module are that students

• gain a relevant overview about information risks in enterprises in all resource areas (organization, data and informations technique {hardware, software, networks})
• become able to decide and judge about controls of information risk-observing strategies
• become able to demonstrate threats in multi-user computer systems.

Literature

Mandatory:

• Stallings, W,; Brown, L.: Computer Security Principles and Practive, Pearson 2012.

• Lehtinen, R,; Russell, D.: Computer Security Basics. 2nd ed., O Reilley', Beijing – Cambridge et al. 2006.
• Barman, S.: Writing Security Policies. New Riders, Pearson, Indianapolis 2002.