IT and Information Security for Administrative Staff.

After completing the course with a pass grade, the student shall be able to: Knowledge of: - In-depth knowledge and understanding of Ransomware, Phishing, Social Engineering. - Vulnerabilities and risks - Costs and consequences of intrusions and fraud - The importance of system updates - GDPR, rules and policies - Passwords and password management - When and why VPN should be used - The importance of information security - Information classification from a security perspective - Password management and different methods for securing password management Skills in: - Identifying and informing about possible security risks and how these can be minimised - Identifying and understanding how rules and policies affect the organisation - Demonstrating savings from using and following a user policy - Identifying and countering vulnerabilities and risks for their organisation - Handling data from a GDPR perspective - Identifying and managing networks to reduce threats and attacks and reporting when threats arise - How to restrict access to sensitive data in an organisation and separate different subsystems to prevent attacks Competence to: - Apply specialised knowledge for secure digitalisation in system administration and propose and justify improvements that prevent cyber threats and IT vulnerability - Communicate and independently assess that policies and laws are complied with and how this is ensured in order to prevent threats that may arise - Apply an active security mindset in daily administration and also teach colleagues how this works