CP2424 - Cybersecurity Risk Management

Cybersecurity risk management is about supporting decision making under uncertainty. This subject describes key principles of risk analysis, risk assessment and risk mitigation for information security using both qualitative and quantitative methodologies that can be applied to business environments of all sizes.

Learning Outcomes

• describe common risk management methodologies, approaches and related standards;
• develop well-formed risk statements;
• describe common security metrics;
• describe the security data analytics pipeline;
• define common descriptive analytics.

Subject Assessment

• Written > Examination (centrally administered) - (40%) - Individual
• Written > Case study analysis - (30%) - Individual
• Written > Project report - (30%) - Group.

Note: Minor variations might occur due to the continuous Subject quality improvement process, and in case of minor variation(s) in assessment details, the Subject Outline represents the latest official information.