Module: CYS7001-30 Business Security Architecture

Level: 7

Credit Value: 30

Module Tutor: John Curry

Module Tutor Contact Details: j.curry@bathspa.ac.uk

1.Brief description and aims of module

Establishing the correct baseline security architecture is the first key step to managing and reducing cyber risk. It is all about getting the right hardware, software, staffing, procedures and training solutions to enable organisations to operate efficiently but securely. Of course, the solutions vary depending on the scale and nature of the business, but there are industry-recognised commonalities encapsulated in agreed standards that apply across organisations.

This module aims to develop your understanding of how to define an appropriate security architecture for a business. You also learn about established architectures, trade-offs between security and business functionality and strategies of information governance. All potential methods are set against relevant policies and standards, and legal and regulatory frameworks. As part of the module you learn how to manage, develop and deliver cyber security training. Taking an applied approach, you gain practical experience of assisting business stakeholders at all levels to maintain a secure working environment.

2.Outline syllabus

● Governance

● Standards, legal and regulatory frameworks

● Information security strategies

● Strategies to maintain third party compliance with contracting authorities policies and standards

● Security architectures

● Target operating models

● Secure development practices

● Training routines

3.Teaching and learning activities

Class Hours:

Seminars examine theories, best practices and case studies. You analyse a range of business types and consider appropriate strategies for implementing securities architectures that comply with local policies/standards and wider regulatory frameworks. Workshops include opportunities to design and audition cyber security training routines.

Independent Study:

You are required to review class materials, conduct research, extend understanding of highlighted topics, and prepare for in-class practical activities.

Assessment Item 1:

• Assessment Type: Coursework
• Description: Security architecture implementation plan (5,000 words)
• % Weighting: 70%

Assessment Item 2:

• Assessment Type: Coursework
• Description: Training session (45 minutes) with supporting documentation
• % Weighting: 30%