production
Skip to Content

CS552E: DIGITAL FORENSICS AND INCIDENT MANAGEMENT (2024-2025)

Last modified: 23 Aug 2024 09:46


Course Overview

Data breaches are everywhere, and cyber incidents can be extremely costly for an organization. Therefore, the speed at which you identify a violation and respond to the incident is critical to your data and systems' security. This course will provide technical and legal discussions on incident detection, investigation, response, and digital forensic techniques. It will walk you through best practices for everything from incident response to in-depth digital forensics. This will help the student identify vulnerabilities and better communicate breaches to those impacted.

Course Details

Study Type Postgraduate Level 5
Term Second Term Credit Points 15 credits (7.5 ECTS credits)
Campus Aberdeen Sustained Study No
Co-ordinators
  • Dr Chunyan Mu
  • Dr Pradip Sharma

What courses & programmes must have been taken before this course?

  • Any Postgraduate Programme
  • Either Master Of Science In Cybersecurity And Machine Learning (Sept Start) or Master Of Science In Cybersecurity

What other courses must be taken with this course?

None.

What courses cannot be taken with this course?

  • CS502E Digital Forensics and Incident Management (Studied)
  • CS55CE Digital Forensics and Incident Management (Studied)

Are there a limited number of places available?

No

Course Description

Data breaches are everywhere, and cyber incidents can be extremely costly for an organization. Therefore, the speed at which you identify a violation and respond to the incident is critical to your data and systems' security. This course will provide technical and legal discussions on incident detection, investigation, response, and digital forensic techniques. It will walk you through best practices for everything from incident response to in-depth digital forensics. This will help the student identify vulnerabilities and better communicate breaches to those impacted. 


Contact Teaching Time

Information on contact teaching time is available from the course guide.

Teaching Breakdown

More Information about Week Numbers


Details, including assessments, may be subject to change until 30 August 2024 for 1st term courses and 20 December 2024 for 2nd term courses.

Summative Assessments

Class Test

Assessment Type Summative Weighting 25
Assessment Weeks 26 Feedback Weeks 26

Look up Week Numbers

Feedback

Online

Learning Outcomes
Knowledge LevelThinking SkillOutcome
ConceptualApplyUnderstand how to design protection plans for incident response
ConceptualApplyState-of-the-art knowledge in digital forensics and incident management

Class Test - Multiple Choice Questions

Assessment Type Summative Weighting 25
Assessment Weeks 25 Feedback Weeks 25

Look up Week Numbers

Feedback

Online

Learning Outcomes
Knowledge LevelThinking SkillOutcome
ConceptualAnalyseAnalyse the breach and respond to the incident in the cybersecurity industry, financial institutions and other knowledge transfer activities
ConceptualApplyUnderstand how to design protection plans for incident response

Case Study (Report and Presentation)

Assessment Type Summative Weighting 25
Assessment Weeks 26 Feedback Weeks 26

Look up Week Numbers

Feedback

2,000 words

Learning Outcomes
Knowledge LevelThinking SkillOutcome
ProceduralAnalyseAnalyse the cybersecurity risk quantification 

Take Home Exam

Assessment Type Summative Weighting 25
Assessment Weeks 24 Feedback Weeks 24

Look up Week Numbers

Feedback
Learning Outcomes
Knowledge LevelThinking SkillOutcome
ConceptualAnalyseAnalyse the breach and respond to the incident in the cybersecurity industry, financial institutions and other knowledge transfer activities
ProceduralAnalyseUnderstand the concepts of digital forensics and incident management

Formative Assessment

There are no assessments for this course.

Resit Assessments

Resit of Failed Elements

Assessment Type Summative Weighting
Assessment Weeks Feedback Weeks

Look up Week Numbers

Feedback

(Continuous Assessment Courses Only) Where a student fails the course overall they will be afforded the opportunity to resit those parts of the course that they failed (pass marks will be carried forward).

Learning Outcomes
Knowledge LevelThinking SkillOutcome
Sorry, we don't have this information available just now. Please check the course guide on MyAberdeen or with the Course Coordinator

Course Learning Outcomes

Knowledge LevelThinking SkillOutcome
ProceduralAnalyseAnalyse the cybersecurity risk quantification 
ConceptualApplyUnderstand how to design protection plans for incident response
ConceptualAnalyseAnalyse the breach and respond to the incident in the cybersecurity industry, financial institutions and other knowledge transfer activities
ConceptualApplyState-of-the-art knowledge in digital forensics and incident management
ProceduralAnalyseUnderstand the concepts of digital forensics and incident management

Compatibility Mode

We have detected that you are have compatibility mode enabled or are using an old version of Internet Explorer. You either need to switch off compatibility mode for this site or upgrade your browser.