Subject description TK2100

Information Risk and Security

2025 Spring

  • Subject code

    TK2100
  • Version

    1
  • English name

    Information Risk and Security
  • Subject points

    7.5
  • Study level

    First cycle degree
  • Semester

    2nd semester

    4th semester (elective)

  • Number of semesters

    1
  • Subject's supervisor

    Bengt Østby
  • Teaching language

    Norwegian
  • Decision

    The course description is approved by The local education committee at School of economics, innovation, and technology 09.10.2023 in LU/SEIT case no. 20/23

Introduction

The current threat landscape is characterised by increasingly advanced attacks against private and public targets. Both organised cybercriminals and state actors use the digital domain to carry out cyberattacks for economic gain or to take control of third-party systems. Awareness of the various threats that exist on the internet is a premise for making appropriate measures. After completing the course, the student should be able to analyse the threats and perform security measures on their own machine, in home networks, and provide professional advice on setup and technology choices for internet-exposed systems. The student should have an overview of the laws and regulations that apply to the use of computers for storing, processing, and presenting data, including privacy protection and copyright. The student should also gain insight into how user awareness and user training play an important role in information security.

Learning Outcomes

Knowledge

The student...

  • can explain the meaning of information security
  • can describe the different levels of information security with corresponding threats and (possible) measures
  • can describe and explain what security measures are available in different technologies
  • can assess security measures in accordance with given situations
  • can explain how user awareness is related to information security and describe the different elements of effective user training

Skills

The student...

  • can perform a risk analysis in relation with a specific technological measure, and recommend adapted measures
  • can plan and implement (unsophisticated) security tests of given technological solutions using standard tools

General competence

The student...

  • can describe and comply with laws and ethical norms for copyright and information security in Norway
  • can reflect on the security aspects of their own user behavior and other users’ behaviour

Degree

Bachelor in information technology (all specializations)

Bachelor in Cyber Security

Elective for:

Bachelor of Creative Marketing Communications

Bachelor of Digital Marketing

Bachelor of Hotel Management

Bachelor of Service Management

Bachelor of Marketing and Brand Management

Bachelor of Marketing and Sales Management

Bachelor of Travel and Tourism Management and Experience Development

Bachelor of Human Resource Management

Bachelor of HR and Industrial Organisational Psychology

Bachelor of HR, Technology and Digitalisation Management

Bachelor of Applied Psychology

Bachelor of Digital Business

Bachelor of Sustainability and Business Development

Bachelor of Business and Administration

Bachelor of Economics, Technology and Innovation

Bachelor of Strategic Purchasing Management

Bachelor of innovation and Business Development

Bachelor of entrepreneurship

Bachelor of Marketing and Business Development

Bachelor of PR and Strategic Communication

Learning activities

Lectures and lab exercises.

Tools

nmap (latest version) and Wireshark (latest version).

There will be no costs for the student associated with the acquisition of necessary tools.

Compulsory assignments

No compulsory activity in this course.

Examination

Exam: Individual written home examination

Duration: 24 hours

Grading scale: The Norwegian grading system uses the graded scale pass or fail

Weighting: Passing of the overall assessment

Support materials: All support materials are allowed

Re-sit examination

Re-sit exam: 24-hour individual written home examination with a new assignment

Comments

Recommended prerequisites:

Databases, Introduction to programming, Creative Web Project, Digital Technology.