Module Overview
This module provides a comprehensive exploration of enterprise security, focusing on the interplay between technology, people, and processes. Students will gain a deep understanding of how security aligns with business goals, enabling them to explain the integration of Information Systems (IS) concepts within organizational frameworks. Key topics include the design of enterprise architecture in relation to IS, identifying critical technology layers and components, and adhering to security policies and standards.
The module covers several core areas:
- Business Strategy and Enterprise Security: Students will learn to identify business objectives and the attributes required to achieve them, conduct risk analysis, and determine the necessary controls to manage risks effectively.
- Conceptual and Physical Architecture: The module introduces conceptual architecture components such as governance, policy, and operational risk management, and maps these to physical architecture elements including platform, hardware, and network security.
- Components Architecture: Students will explore specific security areas and their alignment with physical architecture, including security standards, products, tools, and web services security.
- Operational Architecture and Implementation: The module emphasizes the practical aspects of security, such as administration, configuration management, monitoring, logging, and digital forensics.
- Organizational Reporting and Team Structure: Students will understand the structure and responsibilities of information security teams and organizational reporting hierarchies.
By the end of the module, students will be equipped to explain how enterprise security aligns with business goals, design and map enterprise architectures, and implement and manage various security measures and protocols.
