having finished at least 30 ects credits in programme part (year) 1 AND having finished at least 30 ects credits in programme part (year) 2 AND having finished at least 30 ects credits in programme part (year) 3 AND being enrolled for at least 30 ects credits in programme part (year) 4.

Knowledge/Insight
The student classifies different pre-processing methods and their applications
The student describes the origin or intent of best practices, templates & frameworks

Apply
The student evaluates the proposes information security measures of an IT system or solution

Integrate (simple)
The student chooses the appropriate storage format and technology for storing data
The student systematically uses the correct methods, technology & tools according to best practices, within the given company context
The student evaluates the consequences of deontological choices made during design and implementation of an IT solution in its impact with the solution, end user, customer, company and society

Requirements and risk management

System model
Security objectives
Risk assessment

Threats: attacker model

Attack patterns: CAPEC, MAEC, ...
Threat modeling: STRIDE-LM, LINDDUN, DREAD, ...
Threat intelligence: Pyramid of pain, Lockheed Martin Kill chain, Diamond, ATT&CK (incl ICS), CAR, CAPEC, CWE, CVE, OWASP, ...

Mitigations: Defense model

Security controls
Security and data protection by design
Incident response

Compliance and governance

Frameworks: ISO 27K, COBIT, COBIT Risk, COBIT Information Security, NIST SP 800.53, NIST CSF, CMMI, CIS, PCI DSS, ...
Legal: GDPR, LED, NIS, EIDAS, E-privacy, EU cybersecurity act, PSD2, PNR, ...
Security organisation and conclusions

Case study

Threat identification (information security and data protection)
Threat risk assessment
Controls