Enterprise Security Management Course Descriptor

Course Overview

The effective management of enterprise IT security is dependent upon a range of technological, physical, and human factors, from governance to policy, through to staff expertise and training. Establishing responsibility and decision-making authority for the security service provider paves the way for effective policy and strategy that underpin implementation plans. This course examines a systematic approach to audit, analysis, risk, cost, and timeline planning for the most effective deployment of security service resources. It also considers the wider implementation environment including, organisational constraints and the managerial skills required to ensure the effectiveness of security management.

• To provide learners with detailed insight into the governance and policies that underpin the effective implementation of security services.
• To understand organisational constraints, strategic decision making and security service project management.
• To enable learners to analyse, assess and prioritise security risks and plan the implementation of security services.

Learning Outcomes

On successful completion of the course, students will be able to:

Knowledge and Understanding

Subject Specific Skills

Transferable and Employability Skills

Teaching and Learning

This is an e-learning course, taught throughout the year.

Teaching and learning strategies for this course will include:

• Online learning
• Online discussion groups
• Online assessment

Course information and supplementary materials will be available on the College’s Virtual Learning Environment (VLE).

Learners are required to attend and participate in all the formal and timetabled sessions for this course. Learners are also expected to manage their self-directed learning and independent study in support of the course.

The course learning and teaching hours will be structured as follows:

• Learning and teaching (6 days x 8 hours) = 48 hours
• Independent study = 102 hours

Indicative total learning hours for this course: 150 hours

Assignments (see below) will be completed as part of independent study..

Assessment

Formative

Learners will be formatively assessed during the course by means of set assignments. These will not count towards the final degree but will provide students with developmental feedback.

Summative

Assessment will be in two forms:

Further information about the assessments can be found in the Course Syllabus.

Feedback

Learners will receive formal feedback in a variety of ways: written (via email or VLE correspondence) and indirectly through online discussion groups. Learners will also attend a formal meeting with their Academic Mentor (and for apprentices, including their Line Manager). These bi or tri-partite reviews will monitor and evaluate the learner’s progress. 

Feedback is provided on summative assessed assignments and through generic internal examiners’ reports, both of which are posted on the VLE.

Indicative Reading

Note: Comprehensive and current reading lists for courses are produced annually in the Course Guide or other documentation provided to learners; the indicative reading list provided below is used as part of the approval/modification process only.

Books

• Blum, D. (2020) Rational Cybersecurity for Business: The Security Leaders’ Guide to Business Alignment: Apress.
• Brumfield, C. and Haugli, B. (2021), Cybersecurity Risk Management: Wiley.
• Taylor, A., Alexander, D., French, A., and Sutton, D. (2008) Information Security Management Principles: British Informatics Society Limited.

Journals

Learners are encouraged to read material from relevant journals on Enterprise Security Management as directed by their course leader.

Electronic Resources

Learners are encouraged to consult relevant websites on Enterprise Security Management.

Indicative Topics

• Implementing Security Services
• Security Governance and Policy
• Cyber Risk Assessments and Audit