IT and Information Security for Administrative Staff.

After completing the course, the student shall have knowledge of: 1. Modern cyber threats, such as AI-driven phishing attacks, Ransomware, Social Engineering. 2. Vulnerabilities and risks linked to intrusions and fraud 3. Costs and consequences of security incidents 4. GDPR, the NIS2 directive and other relevant rules and policies for information security 5. Secure password management 6. When and why VPN should be used 7. System updates and proactive security management 8. Information classification from a security perspective After completing the course, the student shall have the skills to: 1. Identify and handle possible security risks and vulnerabilities 2. Inform about security risks and vulnerabilities, and how they can be minimised. 3. Handle data from a GDPR perspective 4. Interpret and comply with legal requirements under the NIS2 directive 5. Identify, handle and report network-related threats to reduce threats and attacks, and use proactive methods to minimise their impact. 6. Restrict access to sensitive data in an organisation and establish security routines to prevent attacks and unauthorised access 7. Demonstrate the cost savings and operational benefits that applying information security policies brings 8. Carry out risk and information classification to prioritise the protection of sensitive data 9. Manage system updates After completing the course, the student shall have the competence to: 1. Apply specialised knowledge for secure digitalisation and propose and justify improvements that prevent cyber threats and IT vulnerability. 2. Independently assess compliance with policies and laws and ensure that measures are taken to prevent potential threats. 3. Handle data in a legally and ethically correct way, while prioritising privacy and data security. 4. Apply an active security mindset in daily administration and also help build a strong security culture in the organisation. IT and Information Security, 30 YH credits In the course, the student learns behaviours and usage that can minimise and counter the vulnerabilities and risks that exist in IT. The student learns about rules and policies as well as information classification from a security perspective. After completing the course, the student shall be able, through proposals for improvement, to prevent cyber threats and IT vulnerability and thereby create secure data handling for the organisation.