MIT9304 Cybersecurity Management and Governance

Unit Code

MIT9304

Level

Postgraduate

Campus

Sydney

Prerequisites

MIT8202

Credit Points

Subject Description

MIT9304 Cyber Security Management and Governance provides students a comprehensive understanding of cybersecurity management and governance frameworks to manage, protect and govern organisation’s information assets effectively. The unit covers key topics of cybersecurity domains, including risk management, compliance, policy development, incident response, and governance frameworks. This subject also explores industry best practices and standards, enabling students to make informed recommendations about aligning cybersecurity strategies with organisational objectives.

Course

Master of Information Technology
Master of Information Technology (Cybersecurity)

Course Level

Level 2

Subject Type

☒ Specialisation (MIT Cybersecurity)

☒ Elective (MIT)

Study Mode: Face to face on site

Study Load: Full-time

Learning Topics

Cybersecurity governance, policy and compliance
Information-risk assessment and management
People, asset and access management
Secure systems, network, supply-chain and cloud security
Security controls, monitoring and continuous improvement

Subject Learning Outcomes

Interpret the fundamental concepts and processes involved in cybersecurity management and data governance, emphasising ethical and responsible practices.
Assess and report on an organisation's data governance and cybersecurity policies and practices to identify potential risks and advise on suitable risk management approaches.
Articulate how risk management approaches can be embedded into data governance and cybersecurity practices to develop an effective overall data security solution.
Use regulatory frameworks to assess the legal and other implications of cybersecurity and data governance policies and practices, including impact on data quality and utility plus privacy protection.
Collaborate and communicate effectively with both technical and non-technical audiences.

Assessment

AIIHE uses a variety of assessment tools to guide and assess each student’s achievement of the subject learning outcomes. In this subject, students undertake portfolio students will compile a portfolio that includes their work on practical exercises, class discussions, and smaller projects related to cybersecurity management and governance, students are provided with templates to develop a comprehensive cybersecurity policy and procedure(s) for a fictional organisation, incorporating elements of the nist cybersecurity framework and iso/iec 27001 standards, and students will analyse a case study and develop a comprehensive cybersecurity strategy that aligns with the organisational goals, regulatory requirements, and incorporates elements of the nist cybersecurity framework and iso/iec 27001 and present their work in class. These tasks assess the knowledge, applied skills, critical analysis, communication and collaborative capabilities relevant to the subject.

Summary of Assessment

Assessment Type	Due Date	Weighting
Assessment 1: Portfolio	Weeks 1 to 12	30%
Assessment 2: Individual Report Cybersecurity Policy Development	Week 8	30%
Assessment 3: Individual Report and Presentation Cybersecurity Strategy Design and Presentation	Week 12, 13	40%

Learning Resources

AIIHE will update the topic coverage of the subject and the available relevant learning resources at the time of subject delivery. In the interim, AIIHE provides the following indicative list of relevant reference material. AIIHE also subscribes to eLearning Resources through the Canvas portal, and where relevant material is available, AIIHE will seek to source reference material from this system for staff and student access.