ITI42220 Cybersecurity Risk Management and Incident Response (Spring 2026)
Facts about the course
- ECTS Credits:
- 10
- Responsible faculty:
- Faculty of Computer Sciences, Engineering and Economics
- Campus:
- Halden
- Course Leaders:
-
- André Alexandersen Hauge
- Vikash Katta
- Teaching language:
- English
- Duration:
- ½ year
Table of contents
The course is affiliated to the following study programme
Recommended previous knowledge
Teaching semester
Content
- Introduction to Information Technology and Operational Technology systems security
- Threat and vulnerability assessment
- Operational cyber event detection and response
The student's learning outcomes on passing the course
Knowledge
The student
- understands and apply the differences between security concerns in information technology and operational technology settings
- has a overview and apply industry best practices and guidelines for managing cybersecurity risks
- can apply and reflect on approaches and methods to identify, analyse and evaluate cybersecurity threats
- comprehend and apply how cyber events are detected and responded to in a realistic operational environment
Skills
The student is able to
- apply industry guidelines for managing cybersecurity risk in industrial settings
- perform security risk analysis on realistic systems
- gain awareness on how various cyber incidents are handled
General competence
The student gets hands-on experience in assessing and managing cybersecurity risks, and gains knowledge on cyber event detection and response in a realistic operational setting.
Teaching and learning methods
Workload
Coursework requirements - conditions for taking the exam
The student must deliver a report on the case study
Coursework requirements must be accepted to qualify for the exam.
Exam
Individual oral exam and a report on case study.
The exam is divided into two parts:
Individual oral exam (50%) is based on the course curriculum. Duration approximately 30 min. No supporting materials allowed.
Report on a selected case study (50%). The case study is chosen by the course responsible. The case study will be performed and reported in groups of three-four students. The students will get an individual grade.
Grading scale A - F in both parts. Both parts of the exam must be passed to pass the course. The student will get an individual joint grade for the entire course.
Examiners
Conditions for resit/rescheduled exams
Resit / rescheduled exam is carried out at the same time as the next ordinary examination. The department management can nevertheless decide to arrange a resit exam in the following semester for students with a valid absence at the ordinary exam.
Upon re-examination, each part of the examination can be retaken.
Course evaluation
This course is evaluated by a:
- Final couse evaluation (compulsory)
The responsible for the course compiles a report based on the feedback from the students and his/her own experience with the course. The report is discussed by the study quality committee at the Department of Computer Science and Communication.