Information Security

Garant předmětu:

Přednášející:

Cvičící:

Předmět zajišťuje:

katedra informační bezpečnosti

Anotace:

Students learn information and IS/ICT security management systems (ISMS), methods for information access control, and basic norms and international standards in this area. They understand methods for management of internal and external security threats, for IS/IT security audits, and for application security testing (e.g., penetration testing).

Požadavky:

Bachelor knowledge of Informatics

Osnova přednášek:

1. Management, management and governance, IT management.

2. Information security management system, IS/ICT governance, international standards on IS/ICT security, legislation in the Czech Republic.

3. Risk management.

4. Physical security, access control system, information resource valuation, internal and external threats, evaluation of countermeasures,

5. Administration security (guidelines, training).

6. Disaster recovery planning, business continuity management, incident management,

7. IS/IT audits, application security testing, penetration testing, certifications.

8. Certification according ISO 27001, Best practises (ISO 17999),

9. Information security trends.

Osnova cvičení:

Cíle studia:

The field of information security governance in modern organizations and companies is of growing importance. The module is to provide students a good overview of methods and standards for informstion security. The aim of the module is to let the students understand the importance of information security governance, to provide them sufficient arguments for the support of ISMS implementation process and for successfull implementation and/or management of ISMS.

Studijní materiály:

2. Tipton, H. F., Krause, M. ''Information Security Management Handbook (Sixth Edition)''. Auerbach, 2008. ISBN 1420067087.

Poznámka:

Information about the course and courseware are available at https://moodle-vyuka.cvut.cz/course/view.php?id=2240

Další informace:

https://moodle-vyuka.cvut.cz/course/view.php?id=2240

Pro tento předmět se rozvrh nepřipravuje

Předmět je součástí následujících studijních plánů: