EM054M6C

Programme
PGE
MGA
UE
Information security management
Semestre
B
Discipline
Information systems management
Volume horaire
27 H
Nombre de places
40
Ouvert aux visitants
Oui
Langue
EN
Responsable
Laura GEORG SCHAFFNER


Contribution pédagogique du cours au programme

LEARNING GOAL 1 : Students will master state-of-the-art knowledge and tools in management fields in general, as well as in areas specific to the specialized field of management.

Students will identify a business organization’s operational and managerial challenges in a complex and evolving environment.
Students will understand state-of-the-art management concepts and tools and use them appropriately.
Students will implement appropriate methodologies to develop appropriate solutions for business issues.
LEARNING GOAL 2 : Students will develop advanced-level managerial skills.
Students will work collaboratively in a team.
Students will participate in a decision-making process in a critical way.
Students will communicate ideas effectively, both orally and in writing, in a business context.
LEARNING GOAL 3 : Students will demonstrate their understanding of practices reflecting ethical, diversity and sustainable development values in business organizations.
Students will identify and analyze issues relating to diversity, ethics and sustainable development in their business context.
LEARNING GOAL 4: Students will study and work effectively in a multicultural and international environment.
Students will analyze business organizations and problems in a multicultural and international environment

Descriptif

Securing the availability, confidentiality and integrity of information became key success factors for enterprises to create, preserve, and extend their competitiveness in the information age. Information Security is an integral part of Information Systems Management going beyond IS boundaries and touching issues of HR, Marketing or Risk Management. This course gives students a comprehensive overview of relevant topics in the area starting with developing Security Management & Governance strategies, designing Security Architectures, explaining the logic of Security Infrastructure and learning about Security Processes. The course combines theories with practical examples, using a case study to deepen students understanding of the topic. The course will also contain a final chapter on discussing Security Ethics encouraging students’ critical thinking while deploying security tools.

Organisation pédagogique

Face-to-face

- Lectures

In group


- Oral presentations
- Projects

Interaction

- Discussions/debates

Others

Aucun élément de cette liste n'a été coché.

Objectifs pédagogiques

Cognitive domain

A l'issue du cours, l'étudiant(e) devrait être capable de / d'...
  • - (niv. 1) Memorize the main theories/frameworks from InfoSec disciplines on Security Management and Governance, incl. HR Security, operational risk management etc.
  • - (niv. 3) Apply the principles for design of security architectures
  • - (niv. 4) Analyze Information Security Infrastructure elements to perform efficient and effective choices on their deployment.
  • - (niv. 5) Generate unanswered questions that may provide fruitful venues for research
  • - (niv. 5) Generate a qualitative research case study.

Affective domain

A l'issue du cours, l'étudiant(e) devrait être capable de / d'...
Aucun affective domain n'a pour le moment été associé à ce cours.

Objectifs de développement durable abordés

Aucun objectif de développement durable n'a été coché.

Plan / Sommaire

Introduction :The role of Information Security in Companies - Definition of Information Security Getting familiar with terms - Security Management Frameworks - Key Performance Indicators - Security Governance and Organisation Module 1 (2 sessions): Information Security Research on Elements and presenting Management System their Meaning Origins PDCA Cycle Control content Module 2: Security Management Metrics (2 sessions) Application of analysis techniques Drivers for Metrics Metric Types and Data Sources Metric Characteristica Infonomics Case Study (1 session): Work on Security Advantages for Distributed Ledger Systems / Presentation Presentation of case Module 3 (2 sessions): Security Architecture Architecture Design Principles - End-to-end Security - Outsourcing Security - Industry 4.0 Security Multiple topographies and risk reports Module 4 (2 sessions): Infrastructure Building Blocks Identity & Access Management - Need to have/know/be - IAM solutions Analysis of life case solutions Data Leakage Prevention - Security (Awareness) Training Analysis of data leakage cases Big Data Security - Virtualization - Logging & Monitoring - Security data analysis SWOT analysis Module 5 (across sessions): Security Ethics Security Ethics Security Developments: Research & Practice Presentation of ethical dilemma: awareness exercise QUIZ at the beginning of every session, starting at the second session. Course Group Project: Presentation of results at every session by (at least) one group, starting at the second session

Prérequis nécessaires

Connaissances en / Notions clés à maîtriser

None

Supports pédagogiques

Mandatory tools for the course

- Computer

Documents in all formats

Aucun élément de cette liste n'a été coché.

Moodle platform

- Upload of class documents
- Interface to submit coursework
- Assessments

Software

Aucun élément de cette liste n'a été coché.

Additional electronic platforms

Aucun élément de cette liste n'a été coché.

Bibliographie recommandée

Ouvrages principaux

Course Book: Management of Information Security, 5th Edition Michael E. Whitman Michael J. Coles College of Business, Kennesaw State University/ Herbert J. Mattord Michael J. Coles College of Business, Kennesaw State University ISBN-10: 130550125X | ISBN-13: 9781305501256 592 Pages

Littérature complémentaire

Aucun ouvrage n'a été renseigné.

Travaux de recherche de l'EM : Veillez à mobiliser au moins une ressource

Peuvent être renseignés les manuels coordonnés, les traductions de manuel, les études de cas traduites etc…
Aucun ouvrage n'a été renseigné.

Modalités d'évaluation

Liste des modalités d'évaluation

Evaluation intermédiaire / contrôle continu 1Séance n° 2,3,4,5,6,7,8,9
Ecrite (10 min) / individuelle / Anglais / pondération : 50 %
Précisions : Each session starts with a short quiz in moodle revisiting the content of the previous session as well as posing questions on the prepared material of the class of the day. Unexcused absences result in a reduction of 1 pt of the final grade. Excused absences can be compensated through bonus questions from quizzes of other sessions.
Cette évaluation sert à mesurer LO1.1, LO1.2, LO1.3, LO3.1
Evaluation intermédiaire / contrôle continu 2Séance n° 2,3,4,5,6,7,8,9
Ecrite et orale (20 min) / en groupe / Anglais / pondération : 50 %
Précisions : Groups of minimum of 2 students present their results of an ongoing course project at every session. The presentation must be made available to the class 2 days before the session.
Cette évaluation sert à mesurer LO1.1, LO1.2, LO1.3, LO2.1, LO2.3, LO4.2
Aucune modalité d'évaluation n'a pour le moment été attribuée à ce cours.