Security of information systems
| Type of study | Follow-up Master |
|---|---|
| Language of instruction | Czech |
| Code | 050-0035/01 |
| Abbreviation | BIS |
| Course title | Security of information systems |
| Credits | 5 |
| Coordinating department | Department of Civil Protection |
| Course coordinator | doc. Ing. Pavel Šenovský, Ph.D. |
Subject syllabus
1. Introduction to security of the information systems
2. ISO 27 000 - ISMS
3. IT Security politics of the organization
4. Risk management for IT systems
5. Configuration management
6. Case studies of the ISO 27 000 documentation
7. COBIT standard
8. ITIL standard
9. Software support for IT security management
10. Anatomy of security incident
11. Forensic analysis of the PC
12. Forensic analysis of mobile devices
13. Current security threats in IT and their connection IT security management
2. ISO 27 000 - ISMS
3. IT Security politics of the organization
4. Risk management for IT systems
5. Configuration management
6. Case studies of the ISO 27 000 documentation
7. COBIT standard
8. ITIL standard
9. Software support for IT security management
10. Anatomy of security incident
11. Forensic analysis of the PC
12. Forensic analysis of mobile devices
13. Current security threats in IT and their connection IT security management
E-learning
textook and other study materials for the course are available in LMS system.
Literature
TAYLOR, Sharon a Ivor MACFARLANE. ITIL small-scale implementation. London: TSO, 2005. ISBN 0-11-330980-5.
Advised literature
BUCKSTEEG, Martin. ITIL 2011. Brno: Computer Press, 2012. ISBN 978-80-251-3732-1
ISO/IEC 27001:2013 Information technology – Security techniques – Information security management systems – Requirements
ISO/IEC 27002:2013 (dříve ISO/IEC 17799:2005) Information technology - Security techniques - Code of practice for information security management
ISO/IEC 27005:2011 Information technology - Security techniques - Information security risk management
ISO/IEC 27001:2013 Information technology – Security techniques – Information security management systems – Requirements
ISO/IEC 27002:2013 (dříve ISO/IEC 17799:2005) Information technology - Security techniques - Code of practice for information security management
ISO/IEC 27005:2011 Information technology - Security techniques - Information security risk management