AZTUProgrammes

Subject · Information security (master)

Fundamentals of Information Security

MM-1401-EN6 creditsAutumn semesterMandatory1

About this subject

Credits

6

Workload

135hours

Semester

Autumn

Academic year

1

Description

The course Fundamentals of Information Security explores the fundamental concepts and principles of information security, as well as methods for protecting information systems against modern cyber threats. The course covers information confidentiality, integrity, and availability (the CIA triad); information assets; threats, vulnerabilities, and risks; authentication and authorization; access control; the fundamentals of cryptography; malware; social engineering; and network and system threats. It also examines key approaches to developing security policies, assessing risks, protecting data, preventing cybersecurity incidents, and ensuring the security of information systems.

Course learning outcomes

  1. CLO 1: Define and list the fundamental concepts of information security, including the CIA triad, risks, threats, and vulnerabilities; symmetric and asymmetric encryption algorithms; and basic network protocols

  2. CLO 2: Explain types of malware, social engineering attacks, and network vulnerabilities, and distinguish their potential impacts on an organization's information assets.

  3. CLO 3: Implement and configure security mechanisms such as firewalls, intrusion detection systems (ids), intrusion prevention systems (ips), and multi-factor authentication (mfa) to protect networks and systems.

  4. CLO 4: Apply the defense in depth (did) strategy as a multi-layered approach to information infrastructure security.

  5. CLO 5: Identify and classify cybersecurity incidents and security breaches by analyzing log files, security information and event management (siem) alerts, and network traffic.

  6. CLO 6: Compare and analyze an organization's security gaps against international standards, including iso/iec 27001 and NIST frameworks, and applicable legislation, including the general data protection regulation (gdpr) and personal data protection legislation.

  7. CLO 7: Conduct risk assessments for an organization's IT infrastructure and evaluate vulnerability scan results and the effectiveness of security policies.

  8. CLO 8: Develop a preliminary incident response plan and a business continuity plan (bcp) strategy to address potential cyberattacks and disasters.