MIT9308 Information Assurance and Risk Management

Unit Code

MIT9308

Level

Postgraduate

Campus

Sydney

Prerequisites

MIT8202

Credit Points

Subject Description

MIT9308 Information Assurance and Risk Management familiarises students with the essential knowledge and skills to protect organisational information assets and manage risk effectively. It covers the principles and practices of information assurance, focusing on the identification, assessment, treatment, and mitigation of risks. Students will gain a comprehensive understanding of risk management frameworks, including ISO 31000 and industry best practices, and learn how to develop and implement robust risk management strategies. Through a combination of lectures, practical exercises, discussions, and case studies, students will gain experience in applying risk management principles to business scenarios.

Course

Master of Information Technology
Master of Information Technology (Cybersecurity)

Course Level

Level 2

Subject Type

☒ Specialisation (MIT Cybersecurity)

☒ Elective (MIT)

Study Mode: Face to face on site

Study Load: Full-time

Learning Topics

Information assurance and risk-management principles
Cybersecurity and risk frameworks
Asset and risk identification
Risk analysis, evaluation and treatment
Business continuity and disaster recovery

Subject Learning Outcomes

Demonstrate a comprehensive understanding of information assurance principles and their integration with broader risk management strategies.
Evaluate information assets and associated risks using risk assessment methodologies, including ISO 31000.
Critically review and revise information risk management strategies and related business continuity plans.
Design and deploy information assurance and security controls to cover the acquisition, processing, transmission and disposal of information.
Communicate information risk management strategies, and business continuity plans effectively and persuasively to technical and non-technical stakeholders.

Assessment

AIIHE uses a variety of assessment tools to guide and assess each student’s achievement of the subject learning outcomes. In this subject, students undertake students will be assessed by a portfolio that includes their work on practical exercises, class discussions, and smaller projects related to information assurance and risk management, students analyse a detailed case study focusing on information assurance concepts and the cia triad (confidentiality, integrity, availability), incorporating the principles and guidelines of iso 31000, and students will work in groups to develop a comprehensive risk management plan for a fictional organisation, incorporating the principles and guidelines of compliance, information assurance measures, and iso 31000; and present their work in class. These tasks assess the knowledge, applied skills, critical analysis, communication and collaborative capabilities relevant to the subject.

Summary of Assessment

Assessment Type	Due Date	Weighting
Assessment 1: Portfolio	Weeks 2 to 12	30%
Assessment 2: Individual Report	Week 9	30%
Assessment 3: Group Report and Presentation	Week 12, 13	40%

Learning Resources

AIIHE will update the topic coverage of the subject and the available relevant learning resources at the time of subject delivery. In the interim, AIIHE provides the following indicative list of relevant reference material. AIIHE also subscribes to eLearning Resources through the Canvas portal, and where relevant material is available, AIIHE will seek to source reference material from this system for staff and student access.