Information Security Risk Management

Information security risk management is a course designed to facilitate critical thinking and practice to recognize, analyse, prioritize, and prepare for the significant risks potentially jeopardizing business continuity. The course introduces key concepts of information security risk management. The practical module enables the students to practice individually and in groups for such work in light of a pedagogical well-known method to internalize the thinking and collaborative work needed in risk analysis and management – while also preparing to think about the cost-effectiveness of the information security work in general and the potential risk mitigation choices.