INFOSYS 341 : Information Security in Business

Business and Economics

2021 Semester Two (1215) (15 POINTS)

Course Prescription

An overview of activities, methods, and procedures used by business to establish robust information security policies. Topics include: security requirements; security management models and practices; risk management; identification and authentication; access control; information security technologies and encryption. In addition, key legal and ethical issues are discussed. Includes practical exercises using certain key technologies to assist learning.

Course Overview

As global networks expands, the interconnection of the world’s information systems and devices of every description becomes vital, as does the smooth operation of communication, computing, and automation solutions. However, ever-evolving threats such as malware and phishing attacks and the success of criminal attackers illustrate the weaknesses in current information technologies and the need to provide heightened security for these systems.
The course provides a broad review of the entire field of information security, background on many related topics, and enough details to facilitate an understanding of the topic as a whole. Knowledge gained throughout the course would allow graduates to use safely digital technology. It may also be a foundation stone of professional carrier in the field of information security.
Part of the course is studying towards CISCO course titled: Cybersecurity Essentials (https://www.netacad.com/courses/cybersecurity-ess). In the case of getting a pass mark from the CISCO course students will receive the course attendance certificate.

Course Requirements

Prerequisite: 30 points at Stage II in either Business Analytics, Computer Science, Information Systems

Capabilities Developed in this Course

Capability 1: Disciplinary Knowledge and Practice
Capability 2: Critical Thinking
Capability 3: Solution Seeking
Capability 4: Communication and Engagement
Capability 5: Independence and Integrity
Graduate Profile: Bachelor of Commerce

Learning Outcomes

By the end of this course, students will be able to:
  1. Demonstrate an understanding of the information security key concepts (Information assets, information security risks, threats, and vulnerabilities, access control, cryptography, security policies, and laws and regulations). (Capability 1)
  2. Evaluate and apply Evaluate and apply solution solving developmental, managerial and audit issues including the review of the related law, evidence collection and security policies (Capability 2)
  3. Demonstrate critical and creative thinking to formulate and justify appropriate recommendations and/or solutions to an information security problem. (Capability 2 and 3)
  4. Present an argument in highly structured format and clearly discuss the central ideas (Capability 4.2 and 5.2)
  5. Identify and classify influence of the existing laws and social conditions affecting safe data processing within an organization (Capability 1 and 4.3)
  6. Develop information security policy related to need of an organization (Capability 2, 3, 4.3 and 5.2)

Assessments

Assessment Type Percentage Classification
9 Lab Reports 4% Individual Coursework
Lab Test 6% Individual Test
Cisco Test 20% Individual Test
10 Class Tests 20% Individual Test
Final Exam 50% Individual Examination
Assessment Type Learning Outcome Addressed
1 2 3 4 5 6
9 Lab Reports
Lab Test
Cisco Test
10 Class Tests
Final Exam
- The minimum pass mark for this course is a C-. However, to progress further in the program you must score at least 25 points from the final examination. Failing to do so will result in the D+ grade irrespective of the coursework results.
- Lowest marked lab report and  class test will not count towards the final grade.
- Active participation in classes or top result for a class test may give you up to 5 bonus points. Detail procedure will be explain in the class.
- All the submissions deadlines will be strictly observed. Detail procedure will be explain in the class. 

Workload Expectations

This course is an introduction to managing information security. General knowledge of digital technology and business processes is essential to cope successfully with the course material. Familiarity with data communication would be a significant advantage.

This course need about 150 hours learning during the semester including:

- 36 contact hours

- 24 hours preparatory reading

- 90 hours of self-study

The key to successful completion of the course without much stress is a regular study during the whole semester.

Attendance at the lectures is not obligatory but is highly recommended.

Delivery Mode

Campus Experience or Online

This course is offered in two delivery modes:

Campus Experience

Attendance is:

- obligatory at all laboratories, lab tests and examination

- highly recommended at lectures and class forums

- is obligatory at groups project reviews meetings

Lectures will be recorded (voice over PP). No other class activities will be recorded.

The following class activities will be provided online:

- Recordings of lectures and class forums

- Content of lab exercises

- Software supporting lab exercises

- Lab tests

- Study materials

The activities for the course are scheduled as a standard weekly timetable delivery.

Online

All scheduled class activities (lectures, forums, lab exercises and lab tests will be run on line at at scheduled class activities.

All schedule material will be provided online.

The Final exam will be run online but format of it will be determined by the university authorities.

The online course activities will follow the standard weekly timetable delivery.

This course runs to the University semester timetable and all the associated completion dates and deadlines will apply.

Learning Resources

  •  Whitman and H. Mattord. Principles of Information Security, Cengage Learning, 2018, Six Edition.   Other useful books/materials:
  • P. Gregory, CISSP Guide to Security Essentials, Course Technology, second edition, 2015, ISBN 978-1-285-06042-2
  • L. Janczewski and W. Caelli, Cyber Conflicts and Small States, Ashgate, 2016, ISBN 978-1-4724-5219-1
  •  Software used in lab will be provided by instructors
  • Lectures notes distributed via Canvas
  • Links to related publications in newspapers, magazines and journals will be provided from time to time.
Students are required to complete the prescribed readings and be fully prepared to contribute to the in-depth discussions. 

Student Feedback

At the end of every semester students will be invited to give feedback on the course and teaching through a tool called SET or Qualtrics. The lecturers and course co-ordinators will consider all feedback and respond with summaries and actions.

Your feedback helps teachers to improve the course and its delivery for future students.

Class Representatives in each class can take feedback to the department and faculty staff-student consultative committees.

Digital Resources

Course materials are made available in a learning and collaboration tool called Canvas which also includes reading lists and lecture recordings (where available).

Please remember that the recording of any class on a personal device requires the permission of the instructor.

Academic Integrity

The University of Auckland will not tolerate cheating, or assisting others to cheat, and views cheating in coursework as a serious academic offence. The work that a student submits for grading must be the student's own work, reflecting their learning. Where work from other sources is used, it must be properly acknowledged and referenced. This requirement also applies to sources on the internet. A student's assessed work may be reviewed against online source material using computerised detection mechanisms.

Inclusive Learning

All students are asked to discuss any impairment related requirements privately, face to face and/or in written form with the course coordinator, lecturer or tutor.

Student Disability Services also provides support for students with a wide range of impairments, both visible and invisible, to succeed and excel at the University. For more information and contact details, please visit the Student Disability Services’ website http://disability.auckland.ac.nz

Special Circumstances

If your ability to complete assessed coursework is affected by illness or other personal circumstances outside of your control, contact a member of teaching staff as soon as possible before the assessment is due.

If your personal circumstances significantly affect your performance, or preparation, for an exam or eligible written test, refer to the University’s aegrotat or compassionate consideration page https://www.auckland.ac.nz/en/students/academic-information/exams-and-final-results/during-exams/aegrotat-and-compassionate-consideration.html.

This should be done as soon as possible and no later than seven days after the affected test or exam date.

Learning Continuity

In the event of an unexpected disruption we undertake to maintain the continuity and standard of teaching and learning in all your courses throughout the year. If there are unexpected disruptions the University has contingency plans to ensure that access to your course continues and your assessment is fair, and not compromised. Some adjustments may need to be made in emergencies. You will be kept fully informed by your course co-ordinator, and if disruption occurs you should refer to the University Website for information about how to proceed.

Student Charter and Responsibilities

The Student Charter assumes and acknowledges that students are active participants in the learning process and that they have responsibilities to the institution and the international community of scholars. The University expects that students will act at all times in a way that demonstrates respect for the rights of other students and staff so that the learning environment is both safe and productive. For further information visit Student Charter https://www.auckland.ac.nz/en/students/forms-policies-and-guidelines/student-policies-and-guidelines/student-charter.html.

Disclaimer

Elements of this outline may be subject to change. The latest information about the course will be available for enrolled students in Canvas.

In this course you may be asked to submit your coursework assessments digitally. The University reserves the right to conduct scheduled tests and examinations for this course online or through the use of computers or other electronic devices. Where tests or examinations are conducted online remote invigilation arrangements may be used. The final decision on the completion mode for a test or examination, and remote invigilation arrangements where applicable, will be advised to students at least 10 days prior to the scheduled date of the assessment, or in the case of an examination when the examination timetable is published.

Published on 04/12/2020 11:30 a.m.