This lecture will be delivered on 2-3 blocked dates! The aim of this lecture is to create the appreciation of the necessary bonds between technological and organizational aspects of IT-Security and to enhance existing knowledge in this area.

In this lecture, organizational aspects of IT-Security are the focus of attention, which includes risk analysis and risk management, application and implementation of information security procedures as well as security policies within corporate government initiatives. The lecture will include several domains of the CISSP certification and enable students to compete this high valued certification after the course. Planned Topics are: # Security Management Practices # Access Control Systems and Methodology # Physical Security # Business Continuity Planning # CobiT # GSHB # ISO 2700x # IT Risk Management

If you cannot make it to the "Vorbesprechung" please be sure to join the TUWEL course and prepare for the first block. You need to do some work for Block 1!!

Details on meetings and schedule in TUWEL.

ECTS Breakdown (3 ECTS = 75 hours):

• Lectures (18h)
• Smaller Assignment & presentation (18h)
• Case study and project presentation (36h)
• Exams (optional) (3h)

written and oral

Lecture notes for this course are available. CISSP All-in-One Exam Guide, Shon Harris, Slides and Papers

Solid Security Foundations