Information security management systemsSyllabus

Subject code

İF-2207y

Credits

5

Student workload

90

Semester

Autumn semester

Academic year

3

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

a) 30 saat - mühazirə b) 30 saat - seminar

Out-of-class hours

a) 50 saat - TSİ b) 40 saat - MRTSİ

The subject provides students with the formation of theoretical knowledge and practical skills on the creation, implementation and continuous improvement of information security management systems (itis). within the subject, the main principles of information security management, its importance for organizations and the main stages of information security management are studied. students are introduced to the basic concepts, principles, concepts and requirements of the iso/iec 27000 family of standards and the iso/iec 27001:2022 standard. the issues of establishing an information security management strategy, planning, organizing ITIS and integrating it with other management systems of the enterprise are considered. also, the role and principles of the application of international frameworks such as ITIL and COBIT in organizations are investigated according to the characteristics of the field of activity. the subject is aimed at forming students' abilities to determine the information security needs of the organization and to apply management approaches in accordance with the requirements of the relevant standards.

• lecture
• seminar
• presentations
• interactive discussion

1. 1

   CLO 1: Knows what information security management is and its basic principles.

2. 2

   CLO 2: Understands the importance and benefits of information security management for organizations.

3. 3

   CLO 3: Familiar with local and international standards on information security management.

4. 4

   CLO 4: Knowledgeable about the iso/iec 27000 family of standards.

5. 5

   CLO 5: Knows the basic concepts and principles of the iso/iec 27001:2013 standard and the basic concepts used therein.

6. 6

   CLO 6: Knows the basic requirements of the iso/iec 27001:2013 standard.

1. 1.
   Basic concepts, limitations and architecture of information security management systems (itms).Lecture

   Within the framework of the topic, the main concepts, purpose and importance of the application of information security management systems (itms) in organizations are studied. the principles of defining the scope and boundaries of itms, the main components of the system and the general architecture are reviewed. the relationship of information security to organizational goals and business processes is explained. also, the subject, purpose, scope and basic concepts necessary for the study of subsequent subjects are examined.

2. 2.
   Pdca model of ITMSLecture

   The role of the PDCA (plan-do-check-act) model in the continuous management of information security management systems and its application principles are studied within the subject. the stages of planning, implementation, verification and improvement of the model are explained, as well as the interaction of these stages within itms. the basic structure, requirements and approach to information security management of the iso/iec 27001 standard are reviewed. it also examines modern information security management processes and their relationship with a continuous improvement approach.

3. 3.
   Concept of risk in different areas of societyLecture

   Within the framework of the subject, the essence of the concept of risk and its role in various fields of activity of the society are studied. factors influencing the creation of risk are reviewed, as well as key concepts such as asset, threat, vulnerability, probability and impact. in the process of risk assessment, the interaction between these concepts and their role in determining the level of risk is explained. common approaches to risk identification and assessment in various fields are also explored.

4. 4.
   The place of risk analysis in the general management scheme of information securityLecture

   Within the framework of the topic, the place and importance of risk analysis in the general management process of information security is studied. the principles of identifying information security risks, analyzing risk sources and possible consequences are explained. assessment of risks by qualitative and quantitative methods, features and application areas of these approaches are reviewed. also, the use of risk modeling and analysis results in making safety management decisions is investigated.

5. 5.
   Information security risk managementLecture

   The process and main methodologies of information security risk management are studied within the subject. principles of risk management and planning appropriate responses to identified risks are explained. basic risk response strategies such as risk avoidance, risk transfer, and risk minimization are reviewed. also, issues of continuous monitoring, re-evaluation of risks and management according to the organization's security goals are investigated.

6. 6.
   Software products to manage information security risksLecture

   Within the subject, software products and technological solutions used for the assessment and management of information security risks are studied. the main functions of software that support risk identification, analysis, assessment, documentation and monitoring are reviewed. the main methods used for the assessment of information security risks and their application through software are explained. it also examines the role of software products in centralizing risk information, preparing reports, and supporting management decisions.

7. 7.
   Modern methods and tools for risk analysis and management of information systems of companiesLecture

   Within the subject, modern methods and tools used for risk analysis and management in information systems of organizations are studied. application principles of CORAS and OCTAVE methodologies in risk identification, modeling and assessment are reviewed. the functions of the riskwatch tool in risk analysis and management, as well as the application of the matrix method in risk assessment based on probability and impact indicators, are explained. also, the characteristics of different risk assessment methods and the issues of choosing a method suitable for the organization's needs are investigated.

8. 8.
   Current methods for managing information security incidentsLecture

   Within the framework of the topic, the main concepts and existing approaches to the management of information security incidents are studied. concepts of security event and incident, principles of their definition and classification are reviewed. the key stages of the incident life cycle are explained, including preparation, detection, analysis, containment, mitigation, and recovery. it also examines the main techniques used in incident management and post-incident assessment.

9. 9.
   Incident management standards and other regulatory requirementsLecture

   Within the framework of the topic, international standards and other regulatory requirements regulating the management of information security incidents are studied. the basic standards and frameworks used for establishing, implementing and continuously improving an incident management system are reviewed. regulatory requirements for incident detection, registration, assessment, response and reporting are explained. also, the principles of forming an incident management system according to the organization's operational characteristics and security needs are examined.

10. 10.
    Information security control mechanismsLecture

    Within the scope of the topic, the purpose, types and application principles of information security control mechanisms are studied. the role of organizational, technical and administrative control mechanisms in protecting information assets is considered. the purpose of the information security audit, its main stages and its importance in evaluating the effectiveness of security controls are explained. also, based on the audit results, the issues of identifying deficiencies and improving the security level are investigated.

11. 11.
    Security operations center (soc)Lecture

    Within the scope of the topic, the concept, purpose and role of the security operations center (soc) in ensuring the information security of the organization is studied. soc's main functions, organizational structure and day-to-day operating principles are reviewed. continuous monitoring, detection, analysis and incident response processes for security incidents are explained. it also examines the key technologies used within SOC and the interrelationship of security roles and responsibilities.

12. 12.
    General architecture of SOCLecture

    The overall architecture and main components of the security operations center (soc) are studied within the subject. within a soc, the technological and organizational components that enable security information collection, centralization, analysis, and incident response are reviewed. the interrelationship of monitoring systems, SIEM platforms, security tools, analytical processes, and human resources is explained. the global architecture of the SOC and the integration of various system and data sources into a single security operations environment are also examined.

13. 13.
    Event modeling in SOCLecture

    The principles of modeling and description of information security events in the SOC environment are studied within the framework of the topic. identifying key attributes, sources, and context information of security incidents is reviewed. approaches to describing, classifying and coordinating events from different systems in a single format are explained. the role of event models in security monitoring, correlation and potential incident detection processes is also explored.

14. 14.
    Establishing SOCLecture

    Within the framework of the topic, the main stages and technological requirements of establishing a security operations center (soc) are studied. open source tools used for security data collection, monitoring, analysis, and incident management in a SOC environment are reviewed. the functions of various security tools and the principles of their integration within a single SOC architecture are explained. also, issues of organizing interaction between data sources, monitoring systems and analysis tools are investigated.

15. 15.
    A new generation of socsLecture

    Development stages, generations and modern SOC models of security operations centers (soc) are studied within the subject. characteristics, key differences, and impact on security operations development of traditional and next-generation socs are reviewed. the structure of SOC teams, their main roles and responsibilities, as well as the principles of inter-team cooperation are explained. it also explores the application of next-generation security tools, automation, behavioral analytics, and advanced threat detection approaches to SOC operations.

1. Chopra, abhishek, and mukund chaudhary. "implementing an information security management system." apress, new york (2020).
2. Muniz, joseph. the modern security operations center. addison-wesley professional, 2021.
3. Culot, giovanna, guido nassimbeni, matteo podrecca, and marco sartor. "the iso/iec 27001 information security management standard: literature review and theory-based research agenda." the TQM journal 33, no. 7 (2021): 76-105.
4. Culot, giovanna, guido nassimbeni, matteo podrecca, and marco sartor. "the iso/iec 27001 information security management standard: literature review and theory-based research agenda." the TQM journal 33, no. 7 (2021): 76-105.
5. Alguliyev, rasim m., yadigar n. imamverdiyev, rasim sh mahmudov, and ramiz m. aliguliyev. "information security as a national security component." information security journal: a global perspective30, no. 1 (2021): 1-18.
6. Ganji, daniel, christos kalloniatis, haralambos mouratidis, and saeed malekshahi gheytassi. "approaches to develop and implement iso/iec 27001 standard-information security management systems: a systematic literature review." int. j. adv. softw 12, no. 3 (2019).