SecOps Management

This subject is available under ICMS undergraduate degrees, please click the button below to find an undergraduate course for you.

Subject Code:

CYB301A

Subject Type:

Specialisation 

Credit Points:

3 credit points 

Pre-requisite/Co-requisite: 

CYB201A Network Security, and 

Course level pre-requisite a total of 24 credit points (15 credit points, including ICT101A, ICT102A, ICT103A, DAT101A from level 100 and 9 credit points from level 200 core subjects) prior enrolling into level 300 core and specialisation subjects. 

Subject Level:

300

Subject Rationale:

Cybersecurity operations (SecOps) management is an essential component of a modern enterprise’s overarching IT governance system. Organisations need IT professionals with a sound understanding of the critical requirements in cyber operations to design, develop, and promote security policies and procedures for information assurance at an organisational level. Developing the necessary capabilities in cybersecurity operations management is vital to monitor, detect, analyse, and respond to cybersecurity incidents and continuously improve the organisation’s security posture. 

This subject introduces students to the broad topic of cybersecurity operations, concentrating on the fundamental concepts, frameworks, standards, and methods applied in IT operations management (ITOM) from an information security perspective. Students will explore security information and event management principles and practices, developing the essential knowledge of security-oriented operational governance for common IT functional areas. 

Students will learn the activities, technologies, and techniques related to cybersecurity incident management and response, event management, and emergency response planning. They will discover the use of cyber threat intelligence in countering cyberattacks and enhancing incident response. The constituents, applications, and responsibilities of a modern security operation centre (SOC), including its role and trends in optimising organisational cyber resilience will also be examined. 

Learning Outcomes:

a) Apply the fundamental concepts and principles underlying cybersecurity operations management within a business context.

b) Critically analyse organisational IT security operations, evaluate gaps and opportunities, and model improvements accordingly using relevant industry standards and frameworks.

c) Evaluate the functions and applications of cyber threat intelligence and Security Operation Centre (SOC) in support of security information and event management in the cyber environment.

d) Investigate cybersecurity incidents and events, and formulate response strategies and plans, applying SecOps tools and techniques.

e) Explore the latest trends and technical advancements in cybersecurity operations management, including their role and applications in enhancing organisational cyber resilience.

Student Assessment:

Broad Topics to be Covered:

Please note that these topics are often refined and subject to change so for up to date weekly topics and suggested reading resources, please refer to the Moodle subject page.