This course will focus on cyber security management within an organisation. It will ensure that students will know how to satisfy legislation related to securing personal and sensitive information and how to manage data correctly.

TBC

None

None

Examination 70%, coursework 30%.

Reassessments are normally available for all courses, except those which contribute to the Honours classification. For non-Honours courses, students are offered reassessment in all or any of the components of assessment if the satisfactory (threshold) grade for the overall course is not achieved at the first attempt. This is normally grade D3 for undergraduate students and grade C3 for postgraduate students. Exceptionally it may not be possible to offer reassessment of some coursework items, in which case the mark achieved at the first attempt will be counted towards the final course grade. Any such exceptions for this course are described below. 

Resit exams are permitted for Masters students

The coursework cannot be redone as the first is composed of classroom quizzes with answers discussed at the next lecture and the second is done as part of a group.

To develop students' knowledge of key concepts in cyber security management in a business context and an awareness of the management imperatives thereof;

To emphasise the importance and wherewithal of information security provision to meet legislation imperatives;
To explore the advanced security management issues related to IT usage within and outside the enterprise, the challenges of ensuring information security and the tools available to managers to assure this; 

Encourage the acquisition of analytical, management and communication skills to identify enterprise assets and threats, argue mitigation actions and communicate such complex concepts to key-decision makers within an enterprise.

By the end of this course students will be able to:

■ describe different deployment concerns for a specific context.

■ design security policy to address perceived concerns for a specific context.

■ argue appropriate approaches to business continuity and resilience.

■ predict legal, social and ethical concerns in the secure management of information.

■ effectively communicate cyber security imperatives to decision makers in an organisation.

■ identify and critically assess threats in a specific context

■ critique security policy and justification for a given context. 

Students must submit at least 75% by weight of the components (including examinations) of the course's summative assessment.