Introduction to Security planning and Incident Handling

1. Introduction and Overview of Contingency Planning

2. Planning for Organizational Readiness: Risk management, limits to risk management, incident reporting systems, business impact analysis

3. Incident Response: Preparation, organization, prevention, detection, notification, reaction, recovery, maintenance, operational problems for CSIRTS and organizational models for CSIRTs

4. Disaster Recovery: Preparation, implementation, operation and maintenance

5. Business Continuity: Preparation, implementation, operations and Maintenance

6. Crisis Management and Human Factors

Knowledge

The student understands contingency planning and its components. This includes the role of policies and procedures as well as risk assessment, business impact analysis, incident reporting and response and business resumption planning.The student understands how to plan for and perform incident response.The student understands known problems withing incident reporting systems.The student has good overview of planning for business continuity of critical business systems.

Skills

The student can plan for and handle larger and smaller incidents and disasters.The student can organize an incident response team in a manner that ensures good handling of incidents while also making sure staff burnout is avoided.

General Competence

The student has broad knowledge of security planning and incident response and is able to communicate this to others.The student is able to handle the many conflicts between security and other fields that inevitably arise. Security procedures can for example be seen as cumbersome and ineffective, causing employees to disregard them. The student shall be able to reason and solve such problems.

Forelesninger

Gruppearbeid

Nettstøttet læring

Prosjektarbeid

Veiledning

Utfyllende informasjon:

Group projects with supervision in addition to lectures.The course will be made accessible for both campus and remote students. Every student is free to choose the pedagogic arrangement form that is best fitted for her/his own requirement. The lectures in the course will be given on campus and are open for both categories of students. All the lectures will also be available on Internet through the learning management system (ClassFronter).