Courses – Fakultet tehničkih nauka u Novom Sadu

Subject: Information Security Management System (19.IB32)

Type of studies	Title
Master Academic Studies	Information Security (Year: 1, Semester: Winter)

General information:

Category	Scientific-professional
Scientific or art field	Quality, Effectiveness and Logistics
ECTS	6

The subject Information Security Management System is studied in order to provide knowledge necessary for managing information security. Considered items include requirements of ISO / IEC 27001 standard along with the activities necessary for implementation of adequate requirements, resource management, management review and improve the integrity of information in the system.

Student is introduced with the basic concepts and principles of information security management in work processes. This knowledge is, in the context of requirements imposed by the market, necessary for a managers success in his/her job, at least to the extent that enables the insight to the most important aspects of the system for managing information security in any business system and their impact on business management.

The place and role of information security in the organization, Basic concepts; Information Security Management System - ISMS; management responsibility, internal audit, Review and improvement of the system; Risk analysis and documentation control system; Standard ISO / IEC 27002 - Information security management mechanisms; Creating information security statement, system performance.

Lecture. Auditory exercises. Consultations. Evaluation is based on the success of laboratory exercises, group tasks, and the exam.

Authors	Title	Year	Publisher	Language
Talabis, Christopher D.; Martin, Jason	Information Security Risk Assessment Toolkit	2013	Elsevier	English
Harold F. Tipton, Micki Krause, editors	Information security management handbook	2003	CRC Press LLC, Danvers, MA, USA	English
Gardner, Bill Thomas, Valerie	Building an Information Security Awareness Program	2014	Elsevier	English
Andress, Jason	The Basics of Information Security	2014	Elsevier	English
Syngress Publishing, Inc.	Security + Study Guide & DVD Training System	2007	Syngress Publishing, Inc., Elsevier, Burlington, MA, USA	English