Security and Risk Management

Unit code:NIT6083Study level:Postgraduate

Credit points

12
(Generally, 1 credit = 10 hours of classes and independent study.)

Location

City Campus
Footscray Park
Online Real Time
VU Brisbane
VU Sydney

Prerequisites

NIT5081 - Fundamentals of Cyber Security
(Or equivalent to be determined by unit coordinator)
Co-requisites
(Corequisite units must be studied concurrently with this unit)

Overview

In this unit, students will be introduced to three different types of information security policies. These are enterprise information security policy, issue-specific security policy, and system-specific security policy. Students will learn how to identify risk using different strategies, including the use of different models, worksheets, and checklists. In addition, various certifications for verifying an individual’s capabilities and identifying the key factors involved in monitoring the external and internal environment will be introduced in this unit.

Learning Outcomes

On successful completion of this unit, students will be able to:

Justify recommendations to minimise security vulnerabilities to contemporary enterprise or other information systems;
Critique organisational security plans or policies and revise to reduce the vulnerability of the organisations;
Review and adapt information system security including logging tools;
Critically review and analyse a system for deploying the most appropriate security solution; and
Design and implement an information security and risk management system for enterprise or general purpose.

Assessment

For Melbourne campuses

Assessment type: Laboratory Work | Grade: 30%

Scenario-based laboratory exercises lab (10%) Practical applications Lab test (20%)

Assessment type: Case Study | Grade: 30%

In-class scenario based Case-study analysis

Assessment type: Project | Grade: 40%

Executive Report

Project - Executive Report about risk analysis and mitigation (A report with about 1500 words focusing on?assessing security risks, threats and vulnerabilities to an organisation and implement appropriate information security protection mechanisms by analysing requirements, plans and IT security policies)
The final project is due in week 8 of the delivery block.