To provide the student with a practitioner's understanding of information security from the view of various stakeholders, roles and process that interact with data at rest or data in transit. This module will cover the core competencies and lead the learner to investigate further new areas as they arise.

1. A udit the necessary Information Systems appropriate to particular business requirements.
2. Critically analyse current best practice frameworks and methodologies for the implementation of security protocols for information systems .
3. Devise a scalable risk management plan including an appropriate risk response strategy based on risk analysis
4. Perform risk analysis to categorise and prioritize risk for communication to stakeholders and to enable directed response and monitoring for emerging risks
5. Devise a strategy for the left-shift of implementation of security protocols from the early stages of the SDLC to enhance the overall ALM
6. Research and defend strategies using appropriate academic and industry sources.

To provide the student with a solid background to information security management in projects and services from the governance level. As part of this module learners are encouraged to contribute to the leadership of their group by displaying critical thinking, analytical skills and judgement particularly when reviewing the impact of their decisions within the wider context.

1. Critically assess the governance of IT security, e valuat ing the wider business and strategic environments within which the project resides .
2. Determine issues relating to the management of large scale complex projects and services including diverse underlying architectures.
3. Examine dynamic problems in an abstract form, analyse them and present a concrete controlled solution.
4. Analyse and evaluate the main approaches in a comprehensive management project plan which incorporates a high level of personal autonomy and accountability.
5. Research and defend strategies in a professional manner using appropriate academic and industry sources.
6. Discuss competencies in the determination, integration and management of communication and documentation needs over a project or service lifecycle.