DMDT : Cyber risk and cyber security

Catalogue des cours de Institut Mines-Télécom Business School

Code

MGFE MIS 5208

Niveau

M2

Discipline

Systèmes d’information

Langue

Anglais/English

Crédits ECTS

2

Heures programmées

18

Charge totale étudiant

36

Coordonnateur(s)

Département

  • Technologies, Information et Management

Equipe pédagogique

Introduction au module

Les évolutions récentes et rapides des technologies de l'information ont accéléré les échanges d'informations. Les entreprises doivent désormais garantir la confidentialité, l'intégrité et la disponibilité des informations et des données sous diverses formes. L'émergence de l'intelligence artificielle complexifie encore la surface d'attaque et de défense. La gestion de la cybersécurité requiert des compétences techniques, managériales, humaines et même éthiques. Ce cours présente la gestion de la cybersécurité comme un domaine interdisciplinaire. Il soulève des questions fondamentales et propose des études de cas représentatives afin d'encourager le travail personnel des étudiants et les discussions sur le paysage actuel de la sécurité.

Bloc de compétences

  • 1. S’approprier les usages avancés et spécialisés des outils de l’intelligence digitale en s’assurant de leur impact durable et responsable

Compétences du bloc

  • 1.1 - Auditer les usages avancés et spécialisés des outils de l'intelligence digitale, afin de les mobiliser avec pertinence, en tenant compte du contexte stratégique des organisations.
  • 1.2 - Actionner les outils de l'intelligence digitale de manière efficiente, pour accompagner les transformations sociétale, numérique, énergétique et environnementale des organisations, en s'assurant de leur impact durable et responsable.

Objectifs d'apprentissage du cours

At the end of this course, students will be able to:
- Identify and assess the main cybersecurity threats, vulnerabilities, and risks affecting information systems and organizations.
- Explain and apply fundamental cybersecurity principles, controls, and risk-management approaches to protect information, systems, and business processes.
- Analyze cybersecurity challenges in an organizational context and propose appropriate security measures while considering business, technological, legal, and governance requirements.

Contenu : structure du module et agenda

The concept of risk
- Types of risk
- Risk management
- Risks linked to information systems
Cybersecurity: what is at stake in enterprises?
- Overview of cybersecurity and its key technical basis
- Tackling cyber security stakes from interdisciplinary perspective: governance, protection, defense, resilience, etc.
- AI & security
- Conceptual and practical guiding questions in cybersecurity management.
- AI agent breaking Game

Contribution à l'atteinte des ODD (Objets du Développement Durable)

This course contributes to SDG 9 (Industry, Innovation and Infrastructure) and SDG 16 (Peace, Justice and Effective Institutions) by teaching students how to protect the digital systems that modern organizations and public services rely on. The course develops practical skills in cyber risk assessment, security governance, and incident response, enabling students to support resilient and trustworthy infrastructures that sustain innovation. It also emphasizes accountability, responsible decision-making, and balancing between different risk management factors, which help students understand the dilemmas of security management.

Apprentissage

synchrone

Méthode pédagogique

Lectures + case studies + scenario-based solution discussion

Système de notation et modalités de rattrapage

Grading consists of projects (no paper exam): Group project on security management and policy-making (40%); individual exploration of technologies related to cybersecurity management (40%), in-class tabletop exercise (20%).
Catch up exam: Practical consultancy and conceptual reflection in writing format. A few scenarios are provided where the students need to provide practical recommendations and higher level reasoning. The grade of the catch up exam replaces the group and individual part of overall score, but not the in-class tabletop exercise.

Règlement du module

Professor-Student Communication
● The professor will contact the students through their school email address (IMT-BS/TSP) and the Moodle portal. No communication via personal email addresses will take place. It is the student responsibility to regularly check their IMT-BS/TSP mailbox.
● Students can communicate with the professor by emailing him/her to his institutional address. If necessary, it is possible to meet the professor in his office during office-hours or by appointment.

Students with accommodation needs
If a student has a disability that will prevent from completing the described work or require any kind of accommodation, he may inform the program director (with supporting documents) as soon as possible. Also, students are encouraged to discuss it with the professor.

Class behavior
● Out of courtesy for the professor and classmates, all mobile phones, electronic games or other devices that generate sound should be turned off during class.
● Students should avoid disruptive and disrespectful behavior such as: arriving late, leaving early, careless behavior (e.g. sleeping, reading a non-course material, using vulgar language, over-speaking, eating, drinking, etc.). A warning may be given on the first infraction of these rules. Repeated violators will be penalized and may face expulsion from the class and/or other disciplinary proceedings.
● The tolerated delay is 5 minutes. Attendance will be declared on Moodle during these 5 minutes via a QR code provided by the teacher at each course start.
● Student should arrive on time for exams and other assessments. No one will be allowed to enter the classroom once the first person has finished the exam and left the room. There is absolutely no exception to this rule. No student can continue to take an exam once the time is up. No student may leave the room during an examination unless he / she has finished and handed over all the documents.
● In the case of remote learning, the student must keep his camera on unless instructed otherwise by the professor.

Honor code
IMT-BS is committed to a policy of honesty in the academic community. Conduct that compromises this policy may result in academic and / or disciplinary sanctions. Students must refrain from cheating, lying, plagiarizing and stealing. This includes completing your own original work and giving credit to any other person whose ideas and printed materials (including those from the Internet) are paraphrased or quoted directly. Any student who violates or helps another student violate academic behavior standards will be penalized according to IMT-BS rules.

Références obligatoires et lectures suggérées

Andeson, R. (2020). Security Engineering : A Guide to Building Dependable Distributed Systems. John Wiley & Sons, Ltd. https://doi.org/10.1002/9781119644682

Mots-clés

Cybersecurity, IT security management, Data governance

Prérequis

None