Welcome to Week 4

The first three weeks of this course have built a comprehensive theoretical and analytical foundation. You have explored the principles of cyber security and the CIA Triad, the governance frameworks and security controls that organisations use to manage information security, and the threats, vulnerabilities and risk assessment approaches that shape security decision-making. This week, the focus shifts from planning to practice.

Understanding frameworks and principles is necessary but not sufficient. The real test of any security management approach is whether it works in the environment where it is deployed: in organisations with competing priorities, resource constraints, hybrid workforces, cloud-based systems and complex supplier relationships. This week examines what it actually looks like to implement and operate security management in practice, how performance is monitored and evaluated, what happens when an incident response plan is activated, and how emerging operational contexts including cloud and mobile security create new management challenges.

You will also receive an introduction to two increasingly important disciplines that sit at the intersection of security management and investigation: digital forensics and Open Source Intelligence (OSINT). Both are relevant to managers not as technical skills to master but as concepts to understand well enough to engage intelligently with the specialists who use them.

This week you will:

• Understand the practical steps involved in planning and implementing an Information Security Management System
• Explore how organisations monitor and evaluate their security performance using metrics and key performance indicators
• Examine incident response and recovery in practice, moving from the planning concepts introduced in Week 3 to operational execution
• Develop an understanding of cloud security and mobile security considerations from a management perspective
• Receive an introduction to digital forensics and OSINT and their relevance to security management
• Analyse a realistic security incident and propose a structured management response
• Complete a reflective homework task and a weekly knowledge check