INFO333-26S2 (C) Semester Two 2026

IT Risk and Security Management

15 points

Details:
Start Date: Monday, 13 July 2026
End Date: Sunday, 8 November 2026
Withdrawal Dates
Last Day to withdraw from this course:
  • Without financial penalty (full fee refund): Sunday, 26 July 2026
  • Without academic penalty (including no fee refund): Sunday, 27 September 2026

Description

This course examines how organisations manage risk and eSecurity associated with their information systems. Topics include management, analysis and application of secure e-Business systems including security policy and network management.

This course examines how organisations manage cybersecurity risk in digital environments. It covers security threats, governance practices, risk management frameworks and security policies. Students will learn how recognised standards and organisational policies support the protection of information assets and long-term resilience.

Learning Outcomes

1.  Define and explain core information security concepts, including threats, vulnerabilities, risks, and
controls, and their impact on organisations.  
2. Analyse and evaluate information security management practices, including governance structures,
security policies, standards, and awareness programs.  
3. Apply structured risk management frameworks to identify, assess, and treat risks, incorporating cost
benefit analysis and organisational risk appetite.  
4. Demonstrate knowledge of incident response and contingency planning strategies to support
organisational resilience.  
5. Integrate legal, ethical, and professional considerations into security decision-making in line with
national and international standards.  
6. Design and evaluate security strategies across people, process, and technology domains, aligning them
with organisational goals and best practice frameworks.

Prerequisites

(1) INFO233 or INFO253 or INFO263 or COSC231 or COSC264; and (2) An additional 30 points at 200-level or above

Restrictions

ACIS333

Timetable 2026

Students must attend one activity from each section.

Lecture A
Activity Day Time Location Weeks
01 Tuesday 09:00 - 11:00 Karl Popper 508
13 Jul - 23 Aug
7 Sep - 18 Oct
Tutorial A
Activity Day Time Location Weeks
01 Thursday 15:00 - 16:00 E13
13 Jul - 23 Aug
7 Sep - 18 Oct

Examinations, Quizzes and Formal Tests

Test A
Activity Day Time Location Weeks
01 Thursday 18:30 - 20:00 A8 Lecture Theatre
17 Aug - 23 Aug

Course Coordinator

Richard Derham

Assessment

Assessment Due Date Percentage 
Test 30%
Project 30%
Homework Exercises 10%
Final Exam 30%

Textbooks / Resources

Required Texts

Michael E. Whitman/Herbert J. Mattord; Management of Cybersecurity ; 7th; Cengage.

Indicative Fees

Domestic fee $1,038.00

International fee $5,388.00

* All fees are inclusive of NZ GST or any equivalent overseas tax, and do not include any programme level discount or additional course-related expenses.

For further information see Department of Accounting and Information Systems on the departments and faculties page .

All INFO333 Occurrences

  • INFO333-26S2 (C) Semester Two 2026