Abstract:Purpose – The purpose of this paper is to describe the development, design, delivery and evaluation of a postgraduate information security subject that focuses on a managerial, rather than the more frequently reported technical perspective. The authors aimed to create an atmosphere of intellectual excitement and discovery so that students felt empowered by new ideas, tools and techniques and realized the potential value of what they were learning in the industry. Design/methodology/approach – The paper develops fundamental principles and arguments that inform the design and development of the teaching curriculum. The curriculum is aimed at security management professionals in general and consultants in particular. The paper explains the teaching method in detail including the specific topics of lectures, representative reading material, assessment tasks and feedback mechanisms. Finally, lessons learned by the authors and their conclusions are presented as a form of reflection. Findings – The instructors recognized four key factors that played a role in the atmosphere of intellectual excitement and motivation. These were new concepts and ideas, an increased level of engagement, opportunities for students to make their own discoveries and knowledge presented in a practical context. Maintaining a high quality of teaching resources, catering for diverse student needs and incorporating learning cycles of assessment in a short period of time were additional challenges. Originality/value – Most “information security” curricula described in research literature take a technology-oriented perspective. This paper presents a much-needed management point of view. The teaching curriculum (including assessment tasks) and experiences will be useful to existing and future teaching and research academics in “information security management”. Those interested in developing their own teaching material will benefit from the discussion on potential topic areas, choice of assessment tasks and selection of recommended reading material.

Information Assurance and Security Education on Undergraduate Computing Degree Programs.

Teaching DevOps Security Education with Hands-on Labware: Automated Detection of Security Weakness in Python

Designing a Security System Administration Course for Cybersecurity with a Companion Project

Effective Learning of Cybersecurity Concepts with Model-Eliciting Activities

Cybersecurity education: Evolution of the discipline and analysis of master programs

Embedding Secure Coding Instruction into the IDE: A Field Study in an Advanced CS Course.

AI assisted Malware Analysis: A Course for Next Generation Cybersecurity Workforce

Evaluating virtual laboratory platforms for supporting on-line information security courses

Integration and Evaluation of Spiral Theory based Cybersecurity Modules into core Computer Science and Engineering Courses

Interactive support for secure programming education.

XSS for the Masses: Integrating Security in a Web Programming Course using a Security Scanner

A Systematic Mapping Study on Teaching of Security Concepts in Programming Courses

Teaching information security management: reflections and experiences

An Online Gamified Learning Platform for Teaching Cybersecurity and More

An Overview of Distance Learning on Information Security in Zhejiang University

AI Security Threats against Pervasive Robotic Systems: A Course for Next Generation Cybersecurity Workforce

Towards an Insightful Computer Security Seminar

Automating the Assessment of Network Security in Higher Education

Adopting the Cybersecurity Concepts into Curriculum The Potential Effects on Students Cybersecurity Knowledge

Interactive Teaching Methods in Information Security Course

Information Security Awareness at Oman Educational Institutions : An Academic Prespective