FREE
AKTU Security Assessment and Risk Analysis (HTCS601) Syllabus PDF – B.Tech Honors Degree in Cyber Security
Security Assessment and Risk Analysis HTCS601
All syllabus, notes, question bank & PYQ for this subject
Free
Download now
- English
- Semester 6
- 0 downloads
- 0 views
Official AKTU syllabus of Security Assessment and Risk Analysis (HTCS601) for B.Tech Honors Degree in Cyber Security – 4 credits, L-T-P 3-1-0. Read the unit-wise course content, course outcomes, evaluation pattern and recommended books online, or download the PDF.
Syllabus — Security Assessment and Risk Analysis
Download PDFHTCS601 · 4 credits · L-T-P 3-1-0
Course Outcomes
At the end of course , the student will be able to understand
| CO 1 | To Describe the concepts of risk management in information security. Define and differentiate various Contingency Planning components. |
| CO 2 | To Skilled to be able to describe the escalation process from incident to disaster in case of security disaster. |
| CO 3 | To understand the concept of the Data Compression. |
| CO 4 | To Design a Disaster Recovery Plan for sustained organizational operations. |
Course Content
| Unit | Topic | Proposed Lecture |
|---|---|---|
| I | SECURITY BASICS: Information Security (INFOSEC) Overview: critical information characteristics – availability information states – processing security countermeasures-education, training and awareness, critical information , characteristics – confidentiality critical information characteristics – integrity, information states – storage, information states – transmission, security , countermeasures- policy, procedures and practices, threats, vulnerabilities. | 08 |
| II | Threats to and Vulnerabilities of Systems: Threats, major categories of threats (e.g., fraud, Hostile Intelligence Service (HOIS). Countermeasures: assessments (e.g., surveys, inspections). Concepts of Risk Management: consequences (e.g., corrective action, risk assessment), cost/benefit analysis and implementation of controls, monitoring the efficiency and effectiveness of controls (e.g., unauthorized or inadvertent disclosure of information). | 08 |
| III | Security Planning: directives and procedures for policy mechanism. Contingency Planning/Disaster Recovery: agency response procedures and continuity of operations, contingency plan components, determination of backup requirements, development of plans for recovery actions after a disruptive event. | 08 |
| IV | Personnel Security Practices and Procedures: access authorization/verification (need- to-know), contractors, employee clearances, position sensitivity, security training and awareness, systems maintenance personnel. Auditing and Monitoring: conducting security reviews, effectiveness of security programs, investigation of security breaches, privacy review of accountability controls, review of audit trails and logs. | 08 |
| V | Operations Security (OPSEC): OPSEC surveys/OPSEC planning INFOSEC: computer security – audit, cryptography-encryption (e.g., point-to-point, network, link). Case study of threat and vulnerability assessment. | 08 |
Text Books
- Information Systems Security, 2ed: Security Management, Metrics, Frameworks and Best Practices, Nina Godbole, John Wiley & Sons.
- Principles of Incident Response and Disaster Recovery, Whitman & Mattord, Course Technology ISBN: 141883663X. Corresponding Online Resources:
- Introduction to Cyber Security,https://swayam.gov.in/nd2_nou20_cs01/preview
- (Web Link)http://www.cnss.gov/Assets/pdf/nstissi_4011.pdf
Ratings & Reviews
No reviews yet — share your experience with this item.