QC4001: SECURITY (2024-2025)

The course provides a solid foundation in computer and information security. It will cover the following topics:

• Information and Risk,

• including models such as confidentiality, integrity and availability (CIA); concepts such as probability, consequence, harm, risk identification, assessment and mitigation; and the relationship between information and system risk;

• Threats and Attacks,

• including threats, how they materialise, typical attacks and how those attacks exploit vulnerabilities;    

• Cybersecurity Architecture and Operations, 

• including physical and process controls that can be implemented across an organisation to reduce information and systems risk, identify and mitigate vulnerability, and ensure organisational compliance;    

• Secure Systems and Products, 

• including the concepts of design, defensive programming and testing and their application to build robust, resilient systems that are fit for purpose;

• Cybersecurity Management, 

• including understanding the personal, organisational and legal/regulatory context in which information systems could be used, the risks of such use and the constraints (such as time, finance and people) that may affect how cybersecurity is implemented;    

• Trustworthy Software, 

• being the enhancement of the overall software and systems culture, with the objective that software should be designed, implemented and maintained in a trustworthy manner, and including the British Standards Institution PAS 754 Software trustworthiness.

• It may cover other topics if time allows.

Information on contact teaching time is available from the course guide.

More Information about Week Numbers

There are no assessments for this course.