IT Risk, Cybersecurity and Governance

BMAN32301 IT Risk, Cybersecurity and Governance 10 Semester 1 Undergraduate Level 3 Erik Beulen Unit coordinator 1 FHEQ level (Framework for Higher Education Qualifications) ' Undefined ' European Credit Transfer & Accumulation System Rating : 5.0 The increasing drive to Digital Transformation has brought about new types of risk related to the prevalence of digital at every level of organisations. The resultant security breaches have created a new awareness of risk among the public, businesses and lawmakers, as well as awareness of the need for cybersecurity risk management frameworks and education. This course unit delivers understanding of the concepts of risk, cybersecurity and governance and initial skills in applying these concepts for managing cybersecurity risks in organisational context.   The increasing drive to Digital Transformation has brought about new types of risk related to the prevalence of digital at every level of organisations. The resultant security breaches have created a new awareness of risk among the public, businesses and lawmakers, as well as awareness of the need for cybersecurity risk management frameworks and education. This course unit delivers understanding of the concepts of risk, cybersecurity and governance and initial skills in applying these concepts for managing cybersecurity risks in organisational context.   The course unit aims to:  <ul><li>Enable students to understand the implication of implementing efficient strategies for undertaking and managing IT risk, cybersecurity and IT governance.  </li><li>Enable students to practice initial skills of managing risk strategies and applying models to support IT governance.</li></ul> Learning outcomes:<ul><li>To understand the concepts and principles of IT risk, cybersecurity and governance.  </li><li>To apply, critically, IT risk tools and techniques to analyse and evaluate disruptive events.</li><li>To develop and justify recommendations based on appropriate research.  </li><li>To work collectively to ensure the delivery of a business-focused risk management strategy.</li><li>To communicate findings in writing.  </li></ul> Other Risk management and especially managing risks related to cybersecurity is a growing industry with increasing opportunities for graduates who have the skills and abilities to make important business decisions. Fuelled by the greater need to soundly manage complex and continually evolving IT systems, organisations are seeking better ways to effectively manage IT related activities and understand their impact. Syllabus:1. Digital transformation and associated security issues with new technologies  2. Managing the risks of Digital Transformation  3. Risk management process, architecture and structure.  4. Risk assessment tools and techniques.  5. Principles of IT governance and cybersecurity management  6. IT Risks: cybersecurity principles and standards  7. Cybersecurity risk management framework: actors, events and vulnerabilities  8. Security by Design   2 Written assignment (inc essay) 40% 3 Report 60% <ul><li>Informal advice and discussion during the lectures.  </li><li>Responses to student emails and questions from course coordinator including feedback provided to a group via an online discussion forum.  </li><li>Written and/or verbal comments on assessed/non-assessed coursework.  </li><li>Generic feedback posted on Blackboard regarding overall performance.  </li></ul> BMAN32141 Business IT Architecture Co-Requisite Compulsory BMAN24630 Business Analysis Pre-Requisite Compulsory N Recommended reading  Fundamentals of Risk Management 5th Edition by Paul Hopkin, Kogan Page, 2018.Information Security Principles 3rd Edition by Andy Taylor et al. BCS, 2020.  Cyber Risk Management: Prioritize Threats, Identify Vulnerabilities and Apply Controls Kindle Edition by Christopher J Hodson, Kogan Page; 1st edition (3 Jun. 2019) Lectures 20 Practical classes & workshops 5 0 75 Additional notes  Pre-requisites:  Business Analysis (BMAN24630)Co-requisites: Business IT Architecture (BMAN32141)Programme Restrictions: Core for ITMB and ITMB with IEPeer Assessment: To ensure that all group members will make a significant contribution to the assignment, marks within student groups can differ based on the results of a peer assessment between group members ( peer assessment form is attached).For Academic Year : 2024/25Updated:  April 2024Approved by:  Undergraduate Committee