Courses – Fakultet tehničkih nauka u Novom Sadu

Subject: Personal Data Protection Management Systems (19.IB36)

Type of studies	Title
Master Academic Studies	Information Security (Year: 1, Semester: Summer)

General information:

Category	Theoretical-methodological
Scientific or art field	Proizvodni i uslužni sistemi, organizacija i menadžment
ECTS	6

The aim of the course is to master key knowledge in the field of security and privacy management system concepts of personal data, understanding the relationship of these concepts with international legislation regulative and leading organizational and management standards in the field, understanding methodological approaches, methods and techniques in providing and securing privacy of personal data, as well as the development of appropriate expertise and competencies, in order to interpret the mentioned elements, in the context of requirements, which an organization must comply with, with reference to the practical aspects of the methods and techniques of planning, implementation, management and development of system, at the organizational level.

Students will be trained to design a system of personal data mapping, which includes the identification of data flows, forms and ways of personal data in the organization, with reference to the principles, methods and techniques of documenting. Finally, students will be trained to design appropriate organizational and management mechanisms for personal data protection, taking into account the requirements of legislation and international organizational and management system standards.

Introductory concepts, theoretical assumptions and principles of security and privacy management systems of personal data, requirements of international legislation, requirements of domestic legislation, requirements of organizational and management standards, initiating and planning the implementation of security and privacy management systems in the organization, development and implementation of the mentioned system in the organization, development and implementation of mechanisms of management and control of the mentioned system, with reference to the mechanisms of continuous improvement.

The course includes lectures on the subject matter, with reference to practical examples related to methods and techniques of implementing mechanisms for mapping, documenting, providing, controlling and continuous improvement of personal data protection systems. The mandatory project encourages work in groups, ie team work on the implementation of the security and privacy management system of personal data, on the example of a selected organization, ie group members working on the project.

Authors	Title	Year	Publisher	Language
Voigt, P., Bussche, A.V.D.	The EU General Data Protection Regulation (GDPR) – A practical guide	2017	Springer	English
EU - IT Governance Privacy Team	EU General Data Protection Regulation (GDPR) An Implementation and Compliance Guide	2017	IT Governance Publishing	English