Risk Management in IT Security (RIS)
6/7. Semester
5 ECTS | 4 SWS
Continuous Assessment (CA)
Information security is always about risks—they must be identified, assessed, addressed, and mitigated in order to manage security within the organization. The methodologies used play a crucial role in this process, and you will learn about them in this module.
Contents
- Risk concepts: what is risk? Perspectives from insurance, finance, engineering, and cybersecurity
- Core dimensions of risk: asset, threat, vulnerability, impact, and likelihood
- Overview of risk frameworks: ISO 31000, ISO/IEC 27005, NIST SP 800-30/-37/-39, COSO ERM, FAIR, OCTAVE
- Qualitative assessment methods: risk matrices, heat maps, Delphi method, structured estimation techniques
- Quantitative assessment methods: ALE/SLE, Monte Carlo simulation, FAIR quantification, handling uncertainty
- Threat modeling: STRIDE, PASTA, attack trees
- Asset management and determination of protection requirements
- Risk identification and analysis in practice
- Risk assessment and prioritization
- Risk treatment: avoidance, mitigation, transfer, and acceptance – selection and justification
- Risk communication, stakeholder management, and reporting
- Risk monitoring and Key Risk Indicators (KRIs)
- Cyber risks in practice: case studies, patterns, and lessons learned
Competencies
Students are able to
Literature
- J. Freund and J. Jones, Measuring and Managing Information Risk: A FAIR Approach. Oxford, U.K.: Butterworth-Heinemann, 2014, ISBN: 978-0-12-420231-3.
- D. W. Hubbard and R. Seiersen, How to Measure Anything in Cybersecurity Risk, 2nd ed. Hoboken, NJ, USA: John Wiley & Sons, 2023, ISBN: 978-1-119-89230-4, doi: 10.1002/9781119892335.
- F. Romeike, Risikomanagement. Wiesbaden, Germany: Springer Gabler, 2018, ISBN: 978-3-658-13951-3, doi: 10.1007/978-3-658-13952-0.
Lecturer
Recommended Previous Knowledge
''
Module Details
| Semester |
6/7 |
| Lecture Language |
German |
|
Frequency
|
Winter Term
|
| Credit Points (ECTS)
|
5 |
| Course Coordinator |
Prof. Dr. Sachar Paulus |
| Duration |
1 Semester |
|
Course Achievement
|
None |
|
Prerequisite for exam
|
None |
|
Exam
|
Continuous Assessment (CA) |
Weekly Hours (SWS)
| Lecture |
1 SWS |
| Exercises |
2 SWS |
| Project |
1 SWS |
| Sum |
4 SWS |
Work Load
| Lecture |
15 h |
| Self Study |
45 h |
| Assignments |
60 h |
| Project |
30 h |
| Sum |
150 h |
