Information security management systems

Description

The subject provides students with the formation of theoretical knowledge and practical skills on the creation, implementation and continuous improvement of information security management systems (itis). within the subject, the main principles of information security management, its importance for organizations and the main stages of information security management are studied. students are introduced to the basic concepts, principles, concepts and requirements of the iso/iec 27000 family of standards and the iso/iec 27001:2022 standard. the issues of establishing an information security management strategy, planning, organizing ITIS and integrating it with other management systems of the enterprise are considered. also, the role and principles of the application of international frameworks such as ITIL and COBIT in organizations are investigated according to the characteristics of the field of activity. the subject is aimed at forming students' abilities to determine the information security needs of the organization and to apply management approaches in accordance with the requirements of the relevant standards.

Course learning outcomes

1. 1

   CLO 1: Knows what information security management is and its basic principles.

2. 2

   CLO 2: Understands the importance and benefits of information security management for organizations.

3. 3

   CLO 3: Familiar with local and international standards on information security management.

4. 4

   CLO 4: Knowledgeable about the iso/iec 27000 family of standards.

5. 5

   CLO 5: Knows the basic concepts and principles of the iso/iec 27001:2013 standard and the basic concepts used therein.

6. 6

   CLO 6: Knows the basic requirements of the iso/iec 27001:2013 standard.