Systems Governance

COMP60721 Systems Governance 15 Semester 1 Postgraduate Taught Level 6 Youcheng Sun Unit coordinator 1 FHEQ level (Framework for Higher Education Qualifications) ' Masters/Integrated Masters P4 ' European Credit Transfer & Accumulation System Rating : 7.5 IT governance is the framework that takes creative information systems from ideas to successful business tools. It's a toolbox of measures for taking the responsibility to build secure architectures that meet the exacting standards of today's budgets and the regulatory environment. Technology meets leadership meets design meets human factors meets compliance. IT Governance is the system by which the current and future use of IT is directed and controlled. IT governance involves evaluating and directing the use of IT to secure information - and the technology that is used to manage it for an organisation or the wider community. It involves engineering basic principles into the socio-technical framework of IT.This is a course unit developed and delivered by Daniel Dresner, a graduate of Manchester Business School who works with government, industry, and the third sector to secure information systems. Over the period of the module, students are joined by a cohort of guest lecturers from industry. This course unit covers the coordination of business decision making for the assurance of information. It concentrates how business responsibilities consider security in strategy, acquisition, performance, conformance, and human behaviour. <ul id="docs-internal-guid-d2f2c35a-7fff-e78f-7ccf-f8c58921dd8b"> <li>Apply analytical techniques to steer a community out of a cyber security incident.<wbr style="color: rgb(0, 0, 0); font-family: Times New Roman; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; -webkit-text-stroke-width: 0px; white-space: normal; word-spacing: 0px;" /></li> <li dir="ltr">Be able to work in a team to resolve differing viewpoints to create a governance portfolio.</li> <li dir="ltr">Apply structured governance techniques to acquire IT systems with security built in.</li> <li dir="ltr">Comprehend the importance of leadership and the balance of decision rights and escalation paths whether that is between people or machines.</li> <li dir="ltr">Be able to specify a security architecture and evaluate for vulnerabilities.</li> <li dir="ltr">Be able to identify and select appropriate metrics to monitor the security of an information system.</li></ul> Analytical skills Group/team working Innovation/creativity Leadership Project management Oral communication Problem solving Research Written communication <ol> <li> Security RACI - Responsibility, Accountability, Consulted and Informed <ul> <li> Leadership</li> <li> Managing investments</li> <li> IT and audit working together</li> </ul> </li> <li> Strategic security <ul> <li> Risk management</li> <li> Information security</li> <li> Implementation roadmap</li> <li> Architectures</li> </ul> </li> <li> Security during acquisition <ul> <li> The business case</li> <li> Supplier governance</li> </ul> </li> <li> Performance of security measures <ul> <li> Capability assessment</li> <li> IT service continuity</li> <li> Performance measurement</li> </ul> </li> <li> Conformance of information systems to security obligations <ul> <li> Legal and regulatory aspects</li> </ul> </li> <li> Managing the human behaviour affecting the security of information systems <ul> <li> Communications</li> </ul> </li></ol> Lectures70% of contact time will be lectures.Laboratories30% of contact time will be group work in the lab. 2 Written assignment (inc essay) 100% This is an interactive module with in-class sessions and an on-line discussion board that operates through the week to keep up the pace between contact days. Y 0 0 150