Information Security Management Systems

Fənnin təsviri

This course introduces the principles, frameworks, and practices of Information Security Management Systems (ISMS) for protecting organizational information assets. It covers information security governance, risk assessment and management, security policies, asset management, access control, incident management, business continuity, compliance, and security monitoring. The course also examines internationally recognized standards and frameworks, including ISO/IEC 27001, ISO/IEC 27002, NIST, and related risk management practices. Students will develop an understanding of how to establish, implement, maintain, and continuously improve an ISMS to ensure the confidentiality, integrity, and availability of information within organizations.

Fənn təlim nəticələri

1. 1

   CLO 1: Explain and apply the fundamental principles and elements of information security management systems (ISMS) and the application areas of frameworks such as ISO/IEC 27001, NIST and COBIT

2. 2

   CLO 2: Identify and assess an organization’s cyber risks and select appropriate managerial and technical measures to mitigate them.

3. 3

   CLO 3: Develop information security policies, procedures and controls and justify their implementation.

4. 4

   CLO 4: Identify security incidents and develop an incident response plan (IRP) and business continuity/disaster recovery plans (BCP/DRP).

5. 5

   CLO 5: Plan audit and compliance processes, analyze evidence and report the findings.

6. 6

   CLO 6: Plan and implement an information security management project individually or as part of a team, and analyze and present the results.