Course detail

IS/IT Security

FP-BbezPAcad. year: 2024/2025

The course focuses on the following topics: information security and availability in IS, communication security, security strategy and security management.

Language of instruction

Czech

Number of ECTS credits

4

Mode of study

Not applicable.

Guarantor

Ing. Viktor Ondrák, Ph.D.

Department

Institute of Informatics (ÚI)

Entry knowledge

Computer literacy, knowledge of operating systems, computer networks, cryptography.

Rules for evaluation and completion of the course

The course is concluded by a course-unit credit:
Conditions for passing a course-unit credit: Knowledge of taught topics and its practical application.
Students must pass

- a written test of 40 questions, must correctly answer at least 20 questions, according to ECTS classification.

- prepare a term paper. The work is classified according to ECTS

The final grade according to ECTS is a weighted arithmetic average of both parts, where the test has a weight of 0.6 and the term paper 0.4
Attendance at lessons is not checked. 

Aims

The main objective of the course is to provide students with the necessary knowledge with respect to IS/IT security, to teach them how to apply the risk analysis as well as to design corporate safety strategy of firm.
Students will gain a basic knowledge of information security - possible security threats, security measures.
After completing the course students will be able to classify assets, analyse security risks in IS / IT and propose comprehensive solutions for their prevention, so as to create security company strategy and proposed safety management system of firm.

Study aids

The Information Security Management scripts are available in electronic form in the course literature

Standards of the 27000 series available electronically from the BUT library

Prerequisites and corequisites

Not applicable.

Basic literature

DOUCEK, P., L. NOVÁK, L. NEDOMOVÁ a V. SVATÁ. Řízení bezpečnosti informací. 2.vyd. Praha: Professional Publishing, 2011. 240 s. ISBN 978-80-7431-050-8
ONDRÁK, V: Management informační bezpečnosti. Brno, 2015, Skriptum FP VUT – dostupné v elektronické podobě.
ONDRÁK, V., P. SEDLÁK, V. MAZÁLEK. Problematika ISMS v manažerské informatice. Brno: CERM. 2013, 378 s. ISBN 978-80-7204-872-4.

Recommended reading

Not applicable.

Classification of course in study plans

  • Programme BAK-PM Bachelor's 2 year of study, summer semester, compulsory-optional

Type of course unit

 

Lecture

26 hod., optionally

Teacher / Lecturer

Ing. Viktor Ondrák, Ph.D.

Syllabus

Topics of lectures are the following:
- Introduction to IS/IT
- Safety management
- Safety risks analysis
- Loss of information, defence methods
- Abuse of information, defence methods
- Safety attacks, defence methods
- Corporate security strategy

Exercise

13 hod., compulsory

Teacher / Lecturer

Ing. Viktor Ondrák, Ph.D.

E-learning texts

Výběr z ČSN/EN 27005
Příklady hrozeb a zranitelností podle ČSN-27005.xlsx 0.02 MB