Information Security Management Systems

Fənnin təsviri

The course Information Security Management Systems examines the fundamental principles of protecting information assets, managing information security risks, and ensuring information security systematically within organizations. The course covers the establishment of an Information Security Management System (ISMS), the development of security policies, risk assessment and management, information asset classification, access control, incident management, business continuity, security audits, and monitoring mechanisms. It also explores the requirements of ISO/IEC 27001 and related standards, the selection and implementation of security controls, compliance assessment, and continuous improvement processes.

Fənn təlim nəticələri

1. 1

   CLO 1: Identify and distinguish the fundamental principles and components of Information Security Management Systems (ISMS) and apply international standards, including ISO/IEC 27001, NIST, and COBIT, appropriately and purposefully.

2. 2

   CLO 2: Identify and assess an organization's cyber risks and select appropriate management and technical measures to mitigate them.

3. 3

   CLO 3: Develop and implement information security policies, procedures, and control mechanisms.

4. 4

   CLO 4: Identify security incidents and develop Incident Response Plans (IRPs) and Business Continuity and Disaster Recovery Plans (BCPs/DRPs).

5. 5

   CLO 5: Plan audit and compliance processes, collect evidence, and prepare reports.

6. 6

   CLO 6: Plan, implement, and analyze the outcomes of cybersecurity management projects independently or as part of a team.