This subject introduces the basic elements of IT security, and aims to familiarise students with the various IT security policies, processes and procedures, as well as best practices in the industry and government. Students will learn about the associated standards for risk management, and how to plan, execute, report and follow up on an information security management system audit.

This subject provides understanding of the threats on the Internet and its applications, and how a cyber-attacker will penetrate network systems and applications. It equips students with the principles and practices of preventing such attacks, discusses these threats such as malicious codes and common application vulnerabilities, website defacing and hacking, illegal access to unauthorised information, distributed denial of services and cyber terrorism. Students will acquire knowledge on assessing the potential threats, various penetration strategies and methods, and effective counter measures. Students will also learn to identify common application vulnerabilities and investigate malicious application behaviour.

This subject aims to develop digital forensics practitioners with sound forensic investigation techniques and best practices. It covers the concepts and techniques required to discover and investigate digital evidence from various digital file systems and storage media including mobile devices. Students will learn to use open-source and commercial toolsets for extraction and analysis of digital evidence. Students will learn to review and correlate events and timelines from various digital sources to reconstruct a security incident as well as produce and present findings in a manner that is acceptable in a court of law.

This subject aims to equip students with the knowledge and skills to analyse and respond to computer and network security incidents based on industry best practices. Students will learn how to apply tools and techniques for incident containment, and identify issues relating to real world incident response handling. They will also learn how to capture and analyse network traffic anomalies. Students will also have chance to apply what they have learnt to respond to real world security incidents in a simulated laboratory environment with access to state-of-art SIEM (Security Information and Event Management) tools.