IS-423 Ethical and Legal Aspects of Information Security

The course is connected to the following study programs

• Cyber Security, Master’s Programme

Teaching language

Norwegian or English. More information at the start of the semester.

Course contents

The course provides an overview of central legislation, guidelines and standards (eg GDPR, ISO / IEC 27000) for information security and privacy, as well as ethical aspects related to these.

Learning outcomes

After completing the course, the student should be able to

• explain functional areas and connections between guidelines for safety, legislation and ethical issues

• compare standards for information security

• summarize key legislation that affects information security practices

• discuss how culture has an impact on ethical aspects of information security

• assess how privacy should be safeguarded in organisations

Examination requirements

Approved mandatory presentations and submissions, in addition to mandatory participation in lectures and discussions. More detailed information will be provided in Canvas at the start of the semester.

Teaching methods

Weekly lectures and group work / practical assignments. Parts of the teaching are compulsory, detailed information about this will be provided in Canvas at the start of the semester. Estimated workload is about 210 hours.

Evaluation

The person responsible for the course decides, in cooperation with student representative, the form of student evaluation and whether the course is to have a midway or end of course evaluation in accordance with the quality system for education, chapter 4.1.

Admission for external candidates

No

Offered as Single Standing Module

Yes. Subject to availability or capacity.

Assessment methods and criteria

Project assignment performed in groups. Graded assessment given in groups.