The module aims to develop a critical awareness of the current state of information systems security, IS threats, security technologies, security architectures and legal policies.
The module content will include the following topics:
- Information Security Principles
- Threats to, and Vulnerabilities of information systems
- Risk Management
- Information Security Management
- Policy, Standards and Procedures
- Legal Framework
- Human and organisational contexts to security
- Security Architecture and Design
- Information Security Controls
o Protection from Malicious Software
o Access Controls and associated security issues
o Telecommunications and Networks Security
o Role of Cryptography
o Application Development Security
o Associated Legal Social Ethical and Professional issues
o Physical and Environmental Security
- Disaster Recovery and Business Continuity Management

100% in course assessment.

Assignment weighted at 70%. (Learning outcomes 2, 3 and 4). In course assessment, 3000 words written proposal for a security policy for an information systems scenario.
A portfolio weighted at 30% (learning outcomes 1 to 4). A variety of tasks will be undertaken which can be built up into an on-line portfolio.

On-line materials and exercises will be provided on Blackboard. They will exemplify topical issues and best practice case studies. Delivery content will be supported by the use of on-line educational video clips and audio podcasts. The practical nature of the module will be emphasised by the provision of practical portfolio tasks and an assignment which reflects all the elements of the module; an information security policy will be developed.

The discusion board will be used to discuss current topics in information security, encourage cognitive and exploratory learning, critical thinking skills, and student-to-student communication. Formative feedback, by e-mail, will be given i response to regular exercises.

None.

Vacca, R.J, Computer and Information Security Handbook, Morgan Kaufmann, 2009, ISBN: 9780123743541 (available as an e-book)
Taylor, A. (ed), Information Security Management Principles: An ISEB Certificate, BCS, 2008, ISBN: 9781902505909
Solomon, M.G., Chapple, M., Information Security Illuminated, Jones and Bartlett, 2005, ISBN:0-7637-2677-X
International Information Systems Security (ISC)2, http://www.isc2.org (CISSP Certification)

Library resources
Module website via Blackboard VLE
Access to Internet