1/20: 成績已公布於作業繳交系統中。最終送交教務處分數為標記 “24-SECMGMT-UNI” 的欄位。如有問題請於本週四 (1/23) 下午五點下班前寫信給老師或是 TA，逾時將無法修改成績。

從理論與實務面介紹資通訊網路安全等的相關潛在威脅與預防手法 ，讓學生能從各個層面瞭解資安風險 ，提升資安相關意識與資安基本素養 。

• D01. 安全與風險管理 (Security and Risk Management)

• D02. 資產安全 (Asset Security)

• D03. 安全架構與工程設計 (Security Architecture and Engineering)

• D04. 通訊與網路安全 (Communication and Network Security)

• D05. 身份識別訪問管理 (Identity and Access Management, IAM)

• D06. 安全評估與測試 (Security Assessment and Testing)

• D07. 安全營運 (Security Operations)

• D08. 軟體開發安全 (Software Development Security)

• 資訊安全相關架構與法規介紹

This course will equip you with the fundamental knowledge and practices needed to manage information security within an organization. 

Why Information Security Management Matters?

In today's digital age, information is a critical asset for organizations. Our dependence on interconnected systems and data makes us vulnerable to cyberattacks that can disrupt operations, steal sensitive information, or cause financial loss. Information security management is the process of implementing and maintaining controls to protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction.

What We'll Cover in this Course:

We will follow a roadmap for information security. Throughout this course, we'll delve into the eight domains, including:

• Security and Risk Management: We'll explore concepts like risk assessment, threat analysis, and security policies.

• Asset Security: Learn how to identify, classify, and protect valuable information assets.

• Security Architecture and Engineering: Gain insights into secure network design, system hardening, and data encryption.

• Communication and Network Security: Understand network security controls like firewalls, intrusion detection systems, and secure protocols.

• Identity and Access Management (IAM): Explore methods for user authentication, authorization, and access control.

• Security Assessment and Testing: Learn about vulnerability assessments, penetration testing, and security audits.

• Security Operations: Discover best practices for incident response, security event management, and disaster recovery.

• Software Development Security: Examine secure coding practices and software development lifecycle security.

• Security Framework, Standard, Law and Regulation.

從理論與實務面介紹資通訊網路安全等的相關潛在威脅與預防手法 ，讓學生能從各個層面瞭解資安風險 ，提升資安相關意識與資安基本素養 。

• D01. 安全與風險管理 (Security and Risk Management)

• D02. 資產安全 (Asset Security)

• D03. 安全架構與工程設計 (Security Architecture and Engineering)

• D04. 通訊與網路安全 (Communication and Network Security)

• D05. 身份識別訪問管理 (Identity and Access Management, IAM)

• D06. 安全評估與測試 (Security Assessment and Testing)

• D07. 安全營運 (Security Operations)

• D08. 軟體開發安全 (Software Development Security)

• 資訊安全相關架構與法規介紹

This course will equip you with the fundamental knowledge and practices needed to manage information security within an organization. 

Why Information Security Management Matters?

In today's digital age, information is a critical asset for organizations. Our dependence on interconnected systems and data makes us vulnerable to cyberattacks that can disrupt operations, steal sensitive information, or cause financial loss. Information security management is the process of implementing and maintaining controls to protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction.

What We'll Cover in this Course:

We will follow a roadmap for information security. Throughout this course, we'll delve into the eight domains, including:

• Security and Risk Management: We'll explore concepts like risk assessment, threat analysis, and security policies.

• Asset Security: Learn how to identify, classify, and protect valuable information assets.

• Security Architecture and Engineering: Gain insights into secure network design, system hardening, and data encryption.

• Communication and Network Security: Understand network security controls like firewalls, intrusion detection systems, and secure protocols.

• Identity and Access Management (IAM): Explore methods for user authentication, authorization, and access control.

• Security Assessment and Testing: Learn about vulnerability assessments, penetration testing, and security audits.

• Security Operations: Discover best practices for incident response, security event management, and disaster recovery.

• Software Development Security: Examine secure coding practices and software development lifecycle security.

• Security Framework, Standard, Law and Regulation.

Announcement (Fall 2024)

• --/--: 本課程修課名單排除已修習資訊安全域專業課程學生。

• 09/01:

  • 本課程第一週 09/13 為準備週，不上正課，影片解釋課堂規定、作業、考試、期末報告。

  • 本課程第二週 09/20 為加簽暨退課日，需要紙本加簽或退課的同學，請至課堂。

• 09/05:

  • 本課程第一週 09/13 為準備週，不上正課。同學可以自行決定到授課教室觀看課堂的說明影片或由此連結觀看影片 https://youtu.be/ZrxjwpoUbYQ。當天會有助教在場。

  • 本課程第二週 09/20 正式上課，請所有同學至課堂上課，本週開始點名（點名是期末成績項目之一）。

• 09/09:

  • 教室異動：商館 260106

• 09/24:

  • 09/27 將實施第一次點名，請到教室操作點名系統與作業繳交系統。

• 09/27:

  • Homework Submission System: http://hsiaom.nccu.edu.tw:8888/

• 10/11:

  • 作業一已公布，作業繳交截止日期為 2024/10/18 23:59:59. 請依上述作業繳交系統網址依照帳號以及密碼繳交。

• 11/01:

  • 因颱風緣故，商院停電無法上課，因此11/1之課程暫停上課。

  • 本日點名將自動設定為所有同學到場，勿至商院。請同學注意出入安全。

• 11/15:

  • 作業二將於 11/1518 公布，繳交期限為 11/29。共有十題，請在作業系統上作答。

• 12/13:

  • 12/20 暫停上課一次。

• 12/27  (五) 請至課堂參與期末討論

• 1/20:

  • 成績已公布於作業繳交系統中。最終送交教務處分數為標記 “24-SECMGMT-UNI” 的欄位。如有問題請於本週四 (1/23) 下午五點下班前寫信給老師或是 TA，逾時將無法修改成績。

Course Objectives & Learning Outcomes

• 培養學生基本資訊安全素養概念

• 瞭解資訊安全之威脅以及相關防禦手法與技術

• 瞭解資訊安全相關政策與規範 

• 瞭解國內外資訊安全與隱私保護相關法律

By the end of this course, you will be able to:

• Discuss the importance of information security management.

• Apply the security framework to understand different security domains.

• Identify and implement essential security controls.

• Develop strategies for mitigating information security risks.

This course is designed to be a valuable resource for anyone interested in information security, from IT professionals to business managers. Whether you're aiming to pursue a certification or simply want to improve your organization's security posture, this course will equip you with the knowledge and skills you need.