Anda baastasemel teadmised ja oskused küberturbe haldusest ja juhtimisest ühes asutuses ning kasutatavamatest tehnikatest.

Provide a basic-level knowlegde and skills of cyber security governance and management with the most commonly used techniques.

Õpiväljundid:
- küberturbe haldus: üliõpilasel on teadmised ettevõtte küberturbe programmi väljatöötamiseks;
- küberriskide analüüs: üliõpilane teostab ettevõtte küberriskide analüüsi;
- küberintsidentide haldus: üliõpilasel on teadmised ettevõtte küberintsidentide haldamise poliitika väljatöötamiseks;
- ettevõtte (äri) jätkusuutlikkus: üliõpilasel on teadmised ettevõtte jätkusuutlikkuse plaani väljatöötamiseks;
- küberturbe strateegia: üliõpilasel on teadmised ettevõtte küberturbe strateegia väljatöötamiseks.

Learning outcomes:
- cybersecurity governance: student has knowledge to develop enterprise cybersecurity program;
- cybersecurity risk analysis: student performs enterprise cyber security risk analysis;
- cybersecurity incident management: student has knowledge to develop enterprise cybersecurity incident management policy;
- business continuity: student has knowledge to develop enterprise business continuity management plan;
- cybersecurity strategy: student has knowledge to develop enterprise cyber security strategy.

Küberturbe juhtimise põhimõtted. Infoturbe ja küberturbe riskide haldus, intsidentide haldus. Tarkvara turvaarhitektuur ja turvaline tarkvaraarendus. Kasutatavamad tehnikad ja raamistikud, nende rakendamine.

Moodle: https://moodle.taltech.ee/course/view.php?id=30021

Cyber security management principles. Information security and cyber security risk management, incident management. Software security architecture and secure software development. Most used techniques and frameworks, their implementation.

Moodle: https://moodle.taltech.ee/course/view.php?id=30021

Eristav hindamine.

Grading.

Rühmatöö koos ettekande ja kaitsmisega seminaril.

Group work with presentation and defense at the seminar.

- ISO/IEC 27000:2014, Information technology - Security techniques -Information security management systems _ Overview and vocabulary;
- ISO/IEC 27001:2013, Information technology - Security techniques - Information security management systems _ Requirements;
- ISO/IEC 27002:2013, Information technology - Security techniques - Code of practice for information security management;
- Dan Shoemaker, Cybersecurity: The Essential Body Of Knowledge, ISBN-13: 978-1435481695;
- Michael E. Whitman, Principles of Incident Response and Disaster Recovery, ISBN-13: 978-1111138059;
- Michael E. Whitman, Management of Information Security, ISBN-13: 978-1435488847;
- Krag Brotby, Information Security Governance: A Practical Development and Implementation Approach, ISBN-13: 978-0470131183.

-