Information Security for Economists 2400-ZEWW885

1. Lesson 1: Introduction to Information Security (1.5 hours)
a. Importance of information security in economics
b. Key concepts in information security
c. Information security challenges and threats
d. Exercise: Registering for TryHackMe and completing the "Introductory Networking" module
2. Lesson 2: Data Protection and Privacy (1.5 hours)
a. Data protection principles
b. Privacy regulations and compliance
c. Data classification and handling
d. Exercise: Exploring GDPR and data protection challenges on TryHackMe
3. Lesson 3: Risk Management in Information Security (1.5 hours)
a. Risk assessment and analysis
b. Risk mitigation strategies
c. Developing a risk management plan
d. Exercise: OverTheWire Bandit Levels 1-5 (introduction to basic Linux commands)
4. Lesson 4: ISO 27001: Overview and Benefits (1.5 hours)
a. Understanding ISO 27001
b. Benefits of implementing ISO 27001
c. ISO 27001 certification process
d. Exercise: Reviewing a sample ISO 27001 documentation package
5. Lesson 5: ISO 27001: Information Security Management System (ISMS) (1.5 hours)
a. ISMS framework and components
b. Developing an ISMS
c. Implementing and maintaining an ISMS
d. Exercise: Analyzing a case study on ISMS implementation
6. Lesson 6: Information Security Policies and Procedures (1.5 hours)
a. Developing and implementing security policies
b. Establishing procedures and guidelines
c. Monitoring and reviewing policies and procedures
d. Exercise: OWASP Juice Shop – exploring web application vulnerabilities and security best practices
7. Lesson 7: Access Control and Authentication (1.5 hours)
a. Principles of access control
b. Authentication methods
c. Implementing access control in an economic context
d. Exercise: Hack The Box – working on a free machine to practice access control and authentication concepts
8. Lesson 8: Data Encryption and Cryptography (1.5 hours)
a. Basics of cryptography
b. Encryption algorithms and techniques
c. Protecting sensitive economic data
d. Exercise: Root Me – completing a cryptography challenge
9. Lesson 9: Network Security (1.5 hours)
a. Fundamentals of network security
b. Securing wired and wireless networks
c. Protecting against network-based attacks
d. Exercise: TryHackMe – completing a network security module
10. Lesson 10: Endpoint Security (1.5 hours)
a. Endpoint security best practices
b. Securing devices and data
c. Managing and monitoring endpoint security
d. Exercise: CyberSecLabs – working on a free lab to practice endpoint security concepts
11. Lesson 11: Cloud students Security (1.5 hours)
a. Cloud security challenges and benefits
b. Securing data in the cloud
c. Selecting secure cloud service providers
d. Exercise: Analyzing cloud security case studies and discussing best practices
12. Lesson 12: Security Incident Management (1.5 hours)
a. Incident detection and response
b. Incident reporting and escalation
c. Post-incident analysis and improvement
d. Exercise: Role-playing a security incident response scenario
13. Lesson 13: Compliance and Auditing (1.5 hours)
a. Compliance with legislation and standards
b. Internal and external audits
c. Continual improvement in information security
d. Exercise: Preparing for a mock ISO 27001 audit
14. Lesson 14: Employee Awareness and Training (1.5 hours)
a. Developing security awareness programs
b. Training employees on security best practices
c. Reinforcing security culture in the workplace
d. Exercise: Designing a security awareness training program for an economic organization
15. Lesson 15: Course Review and Final Project (1.5 hours)
a. Review of course material and key takeaways
b. Final project: Developing an Information Security Plan for an economic organization, incorporating hands-on exercises completed throughout the course
c. Final thoughts and next steps for students