CYBER RISK MANAGEMENT AND COMPLIANCE

CSE5CRM

2020

Credit points: 15

Subject outline

In this subject, students will learn about cyber threats and vulnerabilities, and how different organisations manage these in proportion to the risk that they pose. Students will learn quantitative techniques to assess cyber risks, and apply cost models underlying appropriate technical responses. Students will become familiar with compliance functions and reporting.

School: Engineering and Mathematical Sciences (Pre 2022)

Credit points: 15

Subject Co-ordinator: Alex Ng

Available to Study Abroad/Exchange Students: Yes

Subject year level: Year Level 5 - Masters

Available as Elective: No

Learning Activities: N/A

Capstone subject: No

Subject particulars

Subject rules

Prerequisites: Must be admitted into SMCYC or SMCYB or SMCYL or must obtain subject coordinator's approval

Co-requisites: N/A

Incompatible subjects: N/A

Equivalent subjects: N/A

Quota Management Strategy: N/A

Quota-conditions or rules: N/A

Special conditions: N/A

Minimum credit point requirement: N/A

Assumed knowledge: N/A

Career Ready

Career-focused: No

Work-based learning: No

Self sourced or Uni sourced: N/A

Entire subject or partial subject: N/A

Total hours/days required: N/A

Location of WBL activity (region): N/A

WBL addtional requirements: N/A

Graduate capabilities & intended learning outcomes

Graduate Capabilities

Intended Learning Outcomes

01. Evaluate assets for classification in risk assessments
02. Formulate approaches to assessing cyber risk
03. Determine cost-effective treatments to manage cyber risk
04. Assess and monitor risk management outcomes

Melbourne (Bundoora), 2020, Semester 2, Day

Overview

Online enrolment: Yes

Maximum enrolment size: N/A

Subject Instance Co-ordinator: Alex Ng

Class requirements

Computer LaboratoryWeek: 31 - 43
One 2.00 hours computer laboratory per week on any day including weekend during the day from week 31 to week 43 and delivered via face-to-face.

LectureWeek: 31 - 43
One 2.00 hours lecture per week on any day including weekend during the day from week 31 to week 43 and delivered via face-to-face.

Assessments

Assessment elementCommentsCategoryContributionHurdle%ILO*

Asset classification discussion forum (500- word equivalent)Students to use online forum to discuss asset classification concepts. Marking rubric to specify the structure of the forum discussion.

N/AN/AN/ANo10SILO1

Cost-effective treatments to manage cyber risk forum (500-word equivalent)Students to use online forum to discuss cost-effective treatments to manage cyber risk. Marking rubric to specify the structure of the forum discussion.

N/AN/AN/ANo10SILO3

Develop approaches to assessing cyber risk - Case study and Report (2000- word equivalent)Development of a Cyber security risk assessment program with discussion of its applicability.

N/AN/AN/ANo40SILO1, SILO2, SILO3

1 closed book test (2hrs, 2000- word equivalent)With a focus on how to manage a cyber security risk management programTo be given in last lecture (or for off campus students at end of 2 day compulsory residential workshop).

N/AN/AN/ANo40SILO1, SILO2, SILO3, SILO4