Õppeaine eesmärk on anda baastasemel teadmised ja oskused küberturbe haldusest ja juhtimisest ühes asutuses ning kasutatavamatest tehnikatest.

The aim of this course is to provide a basic-level knowlegde and skills of cyber security governance and management with the most commonly used techniques.

Õppeaine läbinud üliõpilane:
- omab teadmisi ettevõtte küberturvalisuse programmi väljaarendamiseks (küberturbe haldus);
- teostab ettevõtte küberriskide analüüsi (küberriskide analüüs);
- omab teadmisi ettevõtte küberintsidentide haldamise poliitika väljatöötamiseks (küberintsidentide haldus);
- omab teadmisi ettevõtte jätkusuutlikkuse plaani väljatöötamiseks (ettevõtte (äri) jätkusuutlikkus);
- omab teadmisi ettevõtte küberturbe strateegia väljatöötamiseks (küberturbe strateegia).

After completing this course the student:
- has knowledge to develop enterprise cybersecurity program (cybersecurity governance);
- performs enterprise cyber security risk analysis (cybersecurity risk analysis);
- student has knowledge to develop enterprise cybersecurity incident management policy (cybersecurity incident management:);
- has knowledge to develop enterprise business continuity management plan (business continuity);
- has knowledge to develop enterprise cyber security strategy (cybersecurity strategy).

Küberturbe juhtimise põhimõtted. Infoturbe ja küberturbe riskide haldus, intsidentide haldus. Tarkvara turvaarhitektuur ja turvaline tarkvaraarendus. Kasutatavamad tehnikad ja raamistikud, nende rakendamine.

Moodle: https://moodle.taltech.ee/course/view.php?id=30021

Cyber security management principles. Information security and cyber security risk management, incident management. Software security architecture and secure software development. Most used techniques and frameworks, their implementation.

Moodle: https://moodle.taltech.ee/course/view.php?id=30021

Eristav hindamine.

Grading.

Rühmatöö koos ettekande ja kaitsmisega seminaril.

Group work with presentation and defense at the seminar.

ISO/IEC 27000:2014, Information technology - Security techniques -Information security management systems _ Overview and vocabulary;
ISO/IEC 27001:2013, Information technology - Security techniques - Information security management systems _ Requirements;
ISO/IEC 27002:2013, Information technology - Security techniques - Code of practice for information security management;
Dan Shoemaker, Cybersecurity: The Essential Body Of Knowledge, ISBN-13: 978-1435481695;
Michael E. Whitman, Principles of Incident Response and Disaster Recovery, ISBN-13: 978-1111138059;
Michael E. Whitman, Management of Information Security, ISBN-13: 978-1435488847;
Krag Brotby, Information Security Governance: A Practical Development and Implementation Approach, ISBN-13: 978-0470131183.

-

puudub