Subject description TK2100
Information Risk and Security
2025 Spring
Subject code
TK2100Version
1English name
Information Risk and SecuritySubject points
7.5Study level
First cycle degreeSemester
2nd semester
4th semester (elective)
Number of semesters
1Subject's supervisor
Bengt ØstbyTeaching language
NorwegianDecision
The course description is approved by The local education committee at School of economics, innovation, and technology 09.10.2023 in LU/SEIT case no. 20/23
Introduction
The current threat landscape is characterised by increasingly advanced attacks against private and public targets. Both organised cybercriminals and state actors use the digital domain to carry out cyberattacks for economic gain or to take control of third-party systems. Awareness of the various threats that exist on the internet is a premise for making appropriate measures. After completing the course, the student should be able to analyse the threats and perform security measures on their own machine, in home networks, and provide professional advice on setup and technology choices for internet-exposed systems. The student should have an overview of the laws and regulations that apply to the use of computers for storing, processing, and presenting data, including privacy protection and copyright. The student should also gain insight into how user awareness and user training play an important role in information security.
Learning Outcomes
Knowledge
The student...
- can explain the meaning of information security
- can describe the different levels of information security with corresponding threats and (possible) measures
- can describe and explain what security measures are available in different technologies
- can assess security measures in accordance with given situations
- can explain how user awareness is related to information security and describe the different elements of effective user training
Skills
The student...
- can perform a risk analysis in relation with a specific technological measure, and recommend adapted measures
- can plan and implement (unsophisticated) security tests of given technological solutions using standard tools
General competence
The student...
- can describe and comply with laws and ethical norms for copyright and information security in Norway
- can reflect on the security aspects of their own user behavior and other users’ behaviour
Degree
Bachelor in information technology (all specializations)
Bachelor in Cyber Security
Elective for:
Bachelor of Creative Marketing Communications
Bachelor of Digital Marketing
Bachelor of Hotel Management
Bachelor of Service Management
Bachelor of Marketing and Brand Management
Bachelor of Marketing and Sales Management
Bachelor of Travel and Tourism Management and Experience Development
Bachelor of Human Resource Management
Bachelor of HR and Industrial Organisational Psychology
Bachelor of HR, Technology and Digitalisation Management
Bachelor of Applied Psychology
Bachelor of Digital Business
Bachelor of Sustainability and Business Development
Bachelor of Business and Administration
Bachelor of Economics, Technology and Innovation
Bachelor of Strategic Purchasing Management
Bachelor of innovation and Business Development
Bachelor of entrepreneurship
Bachelor of Marketing and Business Development
Bachelor of PR and Strategic Communication
Learning activities
Lectures and lab exercises.
Tools
nmap (latest version) and Wireshark (latest version).
There will be no costs for the student associated with the acquisition of necessary tools.
Compulsory assignments
No compulsory activity in this course.
Examination
Exam: Individual written home examination
Duration: 24 hours
Grading scale: The Norwegian grading system uses the graded scale pass or fail
Weighting: Passing of the overall assessment
Support materials: All support materials are allowed
Re-sit examination
Re-sit exam: 24-hour individual written home examination with a new assignment
Comments
Recommended prerequisites:
Databases, Introduction to programming, Creative Web Project, Digital Technology.