James Cook University Subject Handbook - 2023

CP3415 - Strategy and Governance

Subject Description

This subject focuses on the definition of best practices to enable organisations to operate highly adaptive and responsive cyber resilience processes. Managing cyber resilience operations is a critical management tool for understanding risk status and making important investment decisions on cyber risk. Students will learn the language of cyber resilience and the potential threats to organisations, gaining an active understanding of the cyber threat landscape and the planning and testing of response scenarios. The concept of 'responsive governance' is also being explored. In a rapidly changing cyber risk environment, in fact, the policies and procedures of today are not necessarily valid for long periods of time and may not remain valid between typical annual review cycles, hence students need to learn how to adapt to an ever evolving scenario.

Learning Outcomes

• define and implement Cybersecurity models and strategies to support different business needs and requirements
• analyse and design frameworks to handle risk-based information security and service-continuity
• compare different widely used international standards (e.g. ISO 27001, PCI-DISS, NIST CSF etc.) and understand strengths and weaknesses of each
• analyse and design different approaches to continuously monitor assets and performance in a typical business setting

Subject Assessment

• Written > Examination (centrally administered) - (40%) - Individual
• Written > Case study analysis - (30%) - Individual
• Written > Project report - (30%) - Group

Note that minor variations might occur due to the continuous subject quality improvement process, and in case of minor variation(s) in assessment details, the Subject Outline represents the latest official information.

Availabilities