資安實務與規範

This course is designed to provide an in-depth introduction to Information Security Practice and Regulation. Its primary objective is to impart a comprehensive understanding of international standards of information security and the best practice for industry. Topics range from security or privacy-oriented standards such as ISO 27001/27002 (ISMS), 27701 (PIMS), 27014 (IS Governance) and 29134 (PIA) to standards for specific domains such as IEC 62443 (OT), ISO 28001 (SCM), 42001 (AIMS), 38505 (Data Governance), 23576 & 23244 (Blockchain and distributed ledger technologies). This course offers an extensive introduction to the practices and regulations of information security, designed to equip students with a thorough understanding of the international standards governing information security and industry best practices. Our primary goal is to ensure learners acquire a deep and comprehensive knowledge of how to maintain security and privacy in various organizational contexts, guided by globally recognized standards. Throughout the course, we will cover a broad spectrum of security and privacy-oriented standards, including: - ISO 27001/27002 for Information Security Management Systems (ISMS), - ISO 27701 for Privacy Information Management Systems (PIMS), - ISO 27014 for Information Security Governance, - ISO 29134 for Privacy Impact Assessment (PIA), - Other domain-specific standards such as IEC 62443 (OT), ISO 28001 (SCM), ISO 42001 (AIMS), ISO 38505 (Data Governance), and ISO 23576 & 23244 (Blockchain and distributed ledger technologies). This curriculum is carefully crafted to not only present theoretical knowledge but also to provide practical insights of these standards, preparing students for the real-world challenges they will face in the information security field.

NA

授課教師講授、個案討論

Homework 20% Final Project 35% Midterm Exam 20% Final Exam 25%

Self-Designed Teaching Material

地點

工六363室 (EF363)

時間

周五13:00 (請預約)

聯絡方式

khyeh@nycu.edu.tw