COP4456 BGA- Information SecurityBahçeşehir UniversityDegree Programs SOCIOLOGYGeneral Information For StudentsDiploma SupplementErasmus Policy StatementNational QualificationsBologna Commission
SOCIOLOGY
Bachelor TR-NQF-HE: Level 6 QF-EHEA: First Cycle EQF-LLL: Level 6

Course Introduction and Application Information

Course Code Course Name Semester Theoretical Practical Credit ECTS
COP4456 BGA- Information Security Fall 3 0 3 6
This catalog is for information purposes. Course status is determined by the relevant department at the beginning of semester.

Basic information

Language of instruction: English
Type of course: Non-Departmental Elective
Course Level: Bachelor’s Degree (First Cycle)
Mode of Delivery: Face to face
Course Coordinator : Dr. Öğr. Üyesi GÖRKEM KAR
Course Objectives: This course is designed to teach students how to engage all functional levels within the enterprise to deliver information system security. To this end, the course addresses a range of topics, each of which is vital to securing the modern enterprise.
These topics include inter alia plans and policies, enterprise roles, security metrics, risk management, standards and regulations, physical security, and business continuity.
Each piece of the puzzle must be in place for the enterprise to achieve its security goals; adversaries will invariably find and exploit weak links.

Learning Outcomes

The students who have succeeded in this course;
1) Assess the current security landscape, including the nature of the threat, the general status of common vulnerabilities, and the likely consequences of security failures
2) Critique and assess the strengths and weaknesses of general cybersecurity models, including the CIA triad
3) Appraise the interrelationships among elements that comprise a modern security system, including hardware, software, policies, and people
4) Assess how all domains of security interact to achieve effective system-wide security at the enterprise level.
5) Compare the interrelationships among security roles and responsibilities in a modern information-driven enterprise—to include interrelationships across security domains (IT, physical, classification, personnel, and so on)
6) Assess the role of strategy and policy in determining the success of information security;
7) Estimate the possible consequences of misaligning enterprise strategy, security policy, and security plans,
8) Assess the role of good metrics and key performance indicators (KPIs) in security assessment and governance,
9) Create a good set of information security metrics
10) Evaluate the trends and patterns that will determine the future state of cybersecurity.

Course Content

The Security Environment ,Principles of Cybersecurity,Cybersecurity Management Concepts, Cybersecurity Management Concepts, Enterprise Roles and Structures, Strategy and Strategic Planning, Security Plans and Policies, Security Standards and Controls, Risk Management, Security Metrics and Key Performance Indicators (KPIs), Security Education Awareness, Training, Physical Security and Environmental Events, Contingency Planning , Security Education, Training, and Awarenes, The future of cybersecurity

Weekly Detailed Course Contents

Week Subject Related Preparation
1) The Security Environment Threats, vulnerabilities, and consequences Advanced persistent threats The state of security today Why security matters to TSE
2) "Principles of Cybersecurity • Cybersecurity models (the CIA triad, the star model, the Parkerian hexad) • Variations on a theme: computer security, information security, and information assurance "
3) "Cybersecurity Management Concepts: Security governance Management models, roles, and functions
4) " Enterprise Roles and Structures: Information security roles and positions Alternative enterprise structures and interfaces
5) " Strategy and Strategic Planning: • Strategy • Strategic planning and security strategy • The information security lifecycle • Architecting the enterprise "
6) " Security Plans and Policies: • Levels of planning • Planning misalignment • The System Security Plan (SSP) • Policy development and implementation
7) "Security Standards and Controls: • Security standards and controls • Certification and accreditation (C&A)
8) " Risk Management : • Principles of risk • Types of risk • Risk strategies • The Risk Management Framework (RMF)
9) " Security Metrics and Key Performance Indicators (KPIs) : • The challenge of security metrics • What makes a good metric • Approaches to security metrics • Metrics and FISMA "
10) " Security Education Awareness, Training: • Human factors in security • Developing and implementing a security training plan • Cross-domain training (IT and other security domains)
11) " Physical Security and Environmental Events : • Physical and environmental threats • Physical and environmental controls
12) " Contingency Planning Developing a contingency plan • Understanding the different types of contingency plan • Responding to events "
13) "Security Education, Training, and Awarenes • Human factors in security • Developing and implementing a security training plan • Cross-domain training (IT and other security domains)
14) "The future of cybersecurity • Key future uncertainties • Possible future scenarios • How to apply what you’ve learned

Sources

Course Notes / Textbooks: Information Security: Principles and Practice - Jon Erickson
References:

Evaluation System

Semester Requirements Number of Activities Level of Contribution
Quizzes 2 % 10
Homework Assignments 3 % 15
Project 1 % 15
Midterms 1 % 20
Final 1 % 40
Total % 100
PERCENTAGE OF SEMESTER WORK % 45
PERCENTAGE OF FINAL WORK % 55
Total % 100

ECTS / Workload Table

Activities Number of Activities Duration (Hours) Workload
Course Hours 14 3 42
Study Hours Out of Class 14 3 42
Homework Assignments 3 7 21
Midterms 1 15 15
Final 1 25 25
Total Workload 145

Contribution of Learning Outcomes to Programme Outcomes

No Effect 1 Lowest 2 Low 3 Average 4 High 5 Highest
           
Program Outcomes Level of Contribution
1) To learn and compare major sociology perspectives, both classical and contemporary, and apply all of them to analysis of social conditions.
2) To be able to identify the basic methodological approaches in building sociological and anthropological knowledge at local and global levels
3) To be able to use theoretical and applied knowledge acquired in the fields of statistics in social sciences.
4) To have a basic knowledge of other disciplines (including psychology, history, political science, communication studies and literature) that can contribute to sociology and to be able to make use of this knowledge in analyzing sociological processes
5) To have a knowledge and practice of scientific and ethical principles in collecting, interpreting and publishing sociological data also develop ability how to share this data with experts and lay people, using effective communication skills
6) To develop competence in analyzing and publishing sociological knowledge by using computer software for quantitative and qualitative analysis; and develop an attitute for learning new techniques in these fields.
7) To identify and to have a knowledge of the theories related to urban and rural sociology and demography, and political sociology, sociology of gender, sociology of body, visual sociology, sociology of work, sociology of religion, sociology of knowledge and sociology of crime.
8) To have knowledge of how sociology is positioned as a scientific discipline from a philosophical and historical perspective
9) To have the awareness of social issues in Turkish society, to develop critical perspective in analysing these issues and to have a knowledge of the works of Turkish sociologists and to be able to transfer this knowledge
10) To have the awareness of social issues and global societal processes and to apply sociological analysis to development and social responsibility projects
11) To have the ability to define a research question, design a research project and complete a written report for various fields of sociology, either as an individual or as a team member.
12) To be able to transfer the knowledge gained in the areas of sociology to the level of secondary school.