Module details for Understanding the Cybersecurity Threat

Description

The module will introduce cybersecurity and concepts of information security and their role in a digital world.

Aims

The aim of this module is to help students examine the cyber threat landscape and how organisations can maintain an appropriate level of cybersecurity.

Learning Outcomes

By the end of this module the student should be able to:

1.  Identify and assess cybersecurity threats within an organisational context and apply a risk-based approach to select appropriate methods of securing systems and data.

Indicative Content

1 Cybersecurity in a Digital World

• Introduction to the cybersecurity discipline (definitions and foundational concepts). • Principles of information security management (formal, informal, and technical aspects). • Information security concepts (confidentiality, integrity, availability, and applicable models).

2 The Cyber Threat Landscape

• The cyber threat landscape (vulnerabilities, impact, threat definition) • Analysing cyberattacks (the cyber kill chain)

3 Managing Cybersecurity

• Corporate governance and the regulatory environment (classes of decisions, legislation) • Formal security dimensions (responsibility levels, organisational buy-in, policies) • Risk-based approaches (risk assessment, mitigation, standards and guidelines)

4 Sociotechnical Approaches to Cybersecurity

• Technical measures (Cyber Essentials) • Behavioural aspects of security (individual motivation) • Cybersecurity culture (definitions, principles, training and awareness)

5 Data Protection

• Personal data (definition, processing, individual rights) • Compliance with GDPR (scenario-based)

Teaching and Learning Work Loads