 |
| Detailinformationen |
| Quellcurriculum |
Masterstudium Digital Energy Solutions 2026W |
| Lernergebnisse |
Kompetenzen |
| (*)Students can analyze, design, and evaluate Information Security Management Systems (ISMS) according to international and national standards. They understand the organizational and technical aspects of defining responsibilities, developing policies, classifying information, and performing risk analysis. They are able to select, implement, and monitor security measures, apply security frameworks such as ISO/IEC 27001, BSI IT-Grundschutz, and the Austrian Information Security Handbook, and continuously improve security management processes in organizations.
|
|
| Fertigkeiten |
Kenntnisse |
(*)- Understand the concept, structure, and purpose of an Information Security Management System (ISMS) (K5)
- Apply the requirements of ISO/IEC 27001 to design and implement an ISMS (K6)
- Know the roles and responsibilities in IT and information security, including CISO, security officer, information security officer, and their interfaces to data protection (K4)
- Develop and evaluate an information security policy (K5)
- Understand and apply confidentiality classification of information and procedures for handling classified information in companies and public authorities (K5)
- Conduct risk analysis within the security management process and derive appropriate measures (K6)
- Select and implement technical and organizational security measures based on risk assessment (K5)
- Monitor ISMS performance using security metrics and reporting mechanisms (K5)
- Understand and apply IT Baseline Protection according to the German Federal Office for Information Security (BSI) (K5)
- Apply the principles of security management based on the Austrian Information Security Handbook (K5)
- Evaluate and improve the maturity of information security processes through continuous improvement (K6)
|
(*)- Planning, implementation, monitoring, and improvement of an ISMS
- ISMS according to ISO/IEC 27001
- Roles and responsibilities in information security: CISO, security officer, information security officer, interfaces to data protection
- Development of an information security policy
- Confidentiality classification of information and handling of classified information
- Risk analysis within the security management process
- Selection and implementation of security measures
- Monitoring and security metrics
- IT Baseline Protection according to the German Federal Office for Information Security (BSI)
- Security management based on the Austrian Information Security Handbook
|
|
| Beurteilungskriterien |
(*)Final exam
|
| Lehrmethoden |
(*)Lecture, discussion, course material, exercise examples
|
| Abhaltungssprache |
Englisch |
| Literatur |
(*)Course materials (presentation slides) are made available via Moodle
|
| Lehrinhalte wechselnd? |
Nein |
|
