Data Security

Teacher(s)

Delhaise Elise;

Language

French

Main themes

The question of security inevitably accompanies any project for managing, preserving and implementing an access policy for documents and data. The presence of hybrid documents (paper and electronic versions) or, increasingly, exclusively in electronic format, raises a major issue of availability, integrity, confidentiality, non-repudiation and authentication of the data contained in these documents. Legal rules are required in this area: obligations to take technical and organisational security measures in the presence of personal data and to declare any data breach to the Data Protection Authority; and criminal prosecution of both internal and external hacking. The ISO 27000 standard, a general standard on information systems security, also merits attention.

Learning outcomes

At the end of this learning unit, the student is able to :

At the end of this unit, the student will be able to: Know the legal requirements for data security; Develop a data security policy that includes all relevant aspects (technical and organisational); Identify situations of unauthorised access (external and internal hacking).

Content

Several topics will be covered:

• The concept of security
• Cyber security
• Cyber crime
• Thematic courses related to current events (artificial intelligence, professional secrecy, source confidentiality, etc.)

Teaching methods

The course is taught in a lecture format, but interactivity is ensured through practical exercises and group work.

Evaluation methods

First session
Two-part examination:
a) Group work during the four-month term (5/20 of the final mark)
Ten-page commentary on a current data security case study
b) Two-hour written examination covering three questions:

• one theoretical question
• one practical question
• one critical analysis question

Second session
Two-hour written examination covering four questions:

• two theoretical questions
• one practical question
• one critical analysis question

! The mark obtained for group work in the first session is only valid for the first session and is not carried over to the second session !

Faculty or entity

> EHAC