This course will provide you with a strategic and in-depth knowledge of the issues involved in the evolving field of Information Systems Risk Management. It builds on the overview provided in INTE1120 Introduction to Information Security and INTE1122 Case Studies in Information Security.

With the evolution of information systems and the increasing reliance on them for all aspects of a business, Governance, Risk Management and Compliance (GRC) are becoming increasingly important roles. This course examines risk management as well as its relationship with governance and compliance.

You will learn how to construct the context of the organisation under consideration, as risks are very much context driven. You will then learn to find and document the risks encountered in the information systems of this organisation, and to identify the relationship between these risks and the more commonly occurring risks associated with business and/or project management. In doing this, you will closely follow the process described in the International Standard on Risk Management ISO31000.

The theory of risk management will be accompanied by the examination of case studies - one presented by the lecturer, and the other constructed in the major simulated WIL team assignment.

This course will prepare you for a professional career or postgraduate research in the GRC area.

Given the importance of communication in understanding the risks faced by any business, in this course you will further develop your ability to communicate both technical and non-technical material in a range of forms (written, oral, electronic, graphic) and to tailor the style and means of communication to different audiences. In addition, you will have the opportunity to understand how to work effectively within and potentially as a leader of an interdisciplinary team.

This course includes a simulated Work Integrated Learning (WIL) experience in which your knowledge and skills will be applied and assessed in a simulated workplace context.