Cyber Risk Management

MOTIVATION:

The challenge of selecting the optimal technical, organisational, legal, and other preventive and repressive measures to reduce cyber risks to acceptable levels can only be understood in the context of the application of Cyber Risk Management. Risk Management is about analysing the relationships between threats, incidents and risks (here in the complex world of cyberspace), based on which an adequate set of countermeasures can be designed.

SYNOPSIS:

Risk (= the potential to losing something of value) can manifest itself in cyberspace in all kinds of ways: values at stake are financial wealth, health, physical condition (of people, materials, goods, infrastructures, etc.), well-being, reputation, privacy, trust, etc.

Based on a conceptualisation of cyberspace and its various sub-domains (discussed in the project week of year 1), we introduce risk assessment approaches, both of qualitative and quantitative manner, illustrated with case studies.

CONTENT:

• Cyberspace

• Risk concepts

• Probabilistic and adversarial risk

• System and attacker models

• Requirements and policies

• Risk assessment methods

• Qualitative and quantitative methods

• Measuring security and effectiveness

#### Assessment

Grading will be based on the individual written exam at the end of the course.

Final mark of this course is determined by the grade of the individual exam (100%).

The minimum grade for the individual exam to pass this course is 6.0.

The grade for the individual exam is 2 years valid.

The individual exam is summative.

Detailed feedback on the individual exam can be reviewed by students by contacting the teaching staff of this course.

#### Resit

The students are allowed one re-sit per examination. It is not allowed to re-sit an examination or assignment for which they have received a pass (6,0 or higher). It is allowed to re-sit an examination which they haven't done during the first occasion. The re-sit format needs to be discussed with the teacher of the course in line with examination regulations.

In case the student is granted an extra re-sit by the Board of Examiners, this re-sit has to take place within the study year 2023-2024.