There is not requirement

- Identify the threats and vulnerability of an information system and apply the appropriate protection measures. - Know the organization and structure of cybersecurity in the State. - Know the de jure or de facto schemes of international, European and national security standardization. - Manage the security of an information system - Design a comprehensive information security plan. - Analyze and manage the risks of a specific installation. - Prepare a training plan on information security. - Know the national, European and NATO schemes of information classification, as well as the protection, maintenance and declassification of it and the security measures of the Information Technology systems that handle classified information. Know the legal framework for information security in Spain and the EU.

1. Security of information in the State 2. Standardization, homologation, evaluation, certification and accreditation. Legal framework. 3. Introduction to information security. 4. The Information Security Management System. Family ISO 27XXX. 5. The integral security plan for information systems. 6. Risk analysis and management. The MAGERIT method. The PILAR tool 7. Training and awareness plans. 8. Classification of information 9. Legal aspects related to security management.

Training activities include: Master classes. To facilitate their development, students will receive class presentations in the appropriate web tool and will have basic reference texts that allow them to complete and deepen the most important topics. Practices, individual or group tutorials and personal work of the student, including tests and exams. All this oriented to the acquisition of practical skills related to the program of the subject.