IN9080 – Security and Risk Management

After completing this course, you will:

• have knowledge of the principles of security and risk management
• have knowledge of the role of security and risk management in organisations
• have knowledge of relevant laws, standards and frameworks for information security
• have knowledge of the responsibilities of top level management wrt. information security
• have knowledge about security culture
• be able to establish and operate an ISMS (Information Security Management System)
• be able to conduct threat and risk assessment for information security
• be able to conduct DPIA (Data Protection Impact Assessment)
• be able to judge the appropriateness of security controls for reducing security risks
• be able to organise security-awareness training

PhD candidates from the University of Oslo should apply for classes and register for examinations through Studentweb.

If a course has limited intake capacity, priority will be given to PhD candidates who follow an individual education plan where this particular course is included. Some national researchers’ schools may have specific rules for ranking applicants for courses with limited intake capacity.

PhD candidates who have been admitted to another higher education institution must apply for a position as a visiting student within a given deadline.

The course has:

• 2 hours of lectures per week (plenary sessions)
• 2 hours of workshops per week (plenary sessions)

The workshop sessions will be used for practical exercises, case studies and seminar talks given by students.

The course grade is based on the following assessment items:

• Home exam in the form of a case study: 30%
• Final exam (digital): 70%

Both exams must be passed and must be passed in the same semester. Note that the exam in IN9080 will be more extensive than the one in IN5080.

The home exam consists of writing a report on a specific case study. The report can be written individually or in a group of 2 or 3 students.

For the home exam, any support material is permitted.

For the digital final exam, no support material is permitted.