Bachelor of Science in Information Security - BIS

Short description

Information security is an interdisciplinary field covering the range from technical knowledge of computers and systems, through the psychology of attempted fraud, forgeries, and to legislation and management.

Newly graduate students will be able to understand and practice a whole range of methods to control access to information. These methods are, amongst others, good standards for programming, firewalls as internet security, encrypted information, or just good practice as system administrator. In addition you are expected to be able to apply the correct security measures in different situations, based on analysis of risks and threats. This study will provide you with a solid bachelor’s degree in Information technology, with the emphasis on the technical aspects of the study. Courses in information security parallel with information technology will already from the first term give you an understanding of vulnerability, risks and complexity.

Language: The lectures are mainly held in Norwegian, but some of the courses are held in English (see Student handbook)

Expected learning outcomes

The students will achieve solid skills in information technology with an emphasis on information security. The students will be able to fill rolls as system developers and programmers. In addition they will be able to take care of the need of security of systems and software. The students will be able to conduct projecting information security in an IT-department and possess skills to develop routines, procedures and policies to take care of a company’s need of information security.

At the end of study the students are expected to:

  • Be familiar with how information systems are built and understand how networks functions with emphasis on security
  • Master programming and program development in an object oriented language
  • Possess knowledge in architecture and operation of databases
  • Be familiar with information security threats that exist for computers, network, customers and privates, employees, companies/organizations and Norway as a nation.
  • Be familiar with harms and harmful effects these threats may cause
  • Know the principals and methods to ensure confidentiality, integrity and access of information and information systems
  • Be able to make risk analysis and take measures to reduce the level of vulnerability
  • Be able to be in charge of a company’s or organization’s policy of information security development
  • Be familiar with laws and regulations of current interest regarding information security, and know the content of the Act of the processing of personal data and its regulations
  • Know the principles of how humans and systems may be able to authenticate each other
  • Understand and possess knowledge of how significant peoples attitude are in the work with information security

Table of subjects