To provide the student with a contemporary understanding of infrastructure (cabling, networks, servers and services, security devices) both from the theoretical perspective and as an applied discipline. This module will analyse vulnerabilities in infrastructure and consider best practices and strategies to remediate them.

1. Design and audit the necessary ICT infrastructure appropriate to best practice and business requirements.
2. Devise and implement solutions to service requirements in terms of services, servers and supporting infrastructure.
3. Critically analyse the possible attack vectors to an infrastructure.
4. Devise and formulate detection and response systems focussed on protecting systems.
5. Evaluate and mitigate against techniques for detection avoidance and concealment.

To provide the student with a contemporary understanding of cryptography and the fundamental building blocks required for secure cryptographic systems. The module will analyse the implementation vulnerabilities associated with cryptographic protocols and consider best practices and strategies to remediate them.

1. Critically evaluate the principles and practice of cryptography
2. Evaluate the modes of operation and operational requirements in a business context.
3. Critically analyse the principles of hashing and its use in blockchain, message authentication and integrity verification.
4. To evaluate the application of confidentiality, integrity, authentication, access and non-repudiation in the construction of secure systems.
5. Evaluate and critically analyse the implementation of cryptography in every day cryptographic application.

The module extends learning on the concepts, methodologies and procedures of digital forensics, inclusive of exposure to file systems, data carving, timeline generation, windows 10 forensics and live forensics using both windows and Linux platforms.

1. To distinguish the principle characteristics of divergent file systems
2. To analyse the context for data carving and critically examine the tools used.
3. To construct the appropriate toolkit for conducting digital forensics
4. To critically examine digital forensics in the context of windows forensics.
5. To select an appropriate toolset to conduct live analysis.
6. To examine appropriate image file formats for a given investigative scenario.

To provide the student with a practitioner's understanding of information security from the view of various stakeholders, roles and process that interact with data at rest or data in transit. This module will cover the core competencies and lead the learner to investigate further new areas as they arise.

1. Audit the necessary Information Systems appropriate to particular business requirements.
2. Critically analyse current best practice frameworks and methodologies for the implementation of security protocols for information systems.
3. Devise a scalable risk management plan including an appropriate risk response strategy based on risk analysis
4. Perform risk analysis to categorise and prioritize risk for communication to stakeholders and to enable directed response and monitoring for emerging risks
5. Devise a strategy for the left-shift of implementation of security protocols from the early stages of the SDLC to enhance the overall ALM
6. Research and defend strategies using appropriate academic and industry sources.

This module will develop the concepts of ethical hacking. The learner will examine the concepts of reconnaissance, scanning and exploitation. The learner will critically evaluate hacking processes, frameworks and mitigation measures. The learner will also examine the security and vulnerabilities of different platforms and develop the best practice in these areas. The module will provide the student with skills and knowledge of vulnerabilities, web application attacks and threat intelligence.

1. Identify and evaluate the main stages in Ethical Hacking.
2. Evaluate, assess and mitigate information security threats and develop appropriate policies and guidelines.
3. Apply the process and tools used in footprinting a target system.
4. Evaluate appropriate tools and utilities to scan target hosts and networks.
5. Critically evaluating network services and connections to extract enumeration information.
6. Install, configure, test and troubleshoot ethical hacking frameworks and hackable services.

Where, through no fault of their own, the student fails to obtain a placement this alternative project module will be offered. This module aims to provide operational experience of best practice in the design, implementation, and management of Security Systems and practices to learners through research and practical experience in topics which relate to trending topics or typical industry tasks. The objective is to maximise their employability and future career prospects, this module enables students to become exposed to research and communications as found in a professional working environment.

1. Explored the varied technical environments applied to the management of Security systems and practices.
2. Analyse complex problems in the design, implementation, maintenance, and management of Security systems and practices and pursue appropriate approaches to solving them.
3. Reflect on policies and practices applied in Security systems and practices.
4. Apply problem solving, design and research skills typically used in Security systems and practices.
5. Reflect upon their personal professional practice demonstrating appropriate and effective communication, and organizational skills to aid life-long learning and continuing professional development.
6. Exercise professional and ethical judgement in decision making and communications in order to engage a professional audience as part of this process.
7. Apply research, information gathering, critical analysis, design, and implementation techniques appropriately and effectively.