Teaching Case Combining Standards to Conduct Risk Assessment at SecureEnd Solutions
In today's cybersecurity landscape, organizations need frameworks that provide a holistic approach to risk assessment as part of the risk management process.This case introduces SecureEnd Solutions, a rapidly growing cybersecurity company, and its core team, including Alan Touring, Ada Lovecode, Bob Jobs, and Suzan, the head of development.The company must conduct a detailed risk assessment to obtain ISO/IEC 27001 certification using a combination of ISO/IEC 27005:2022 and NIST SP 800-30 guidelines.Students will engage with the characters and the company's technological ecosystem to apply risk assessment standards, enhancing their decision-making, analytical, and problem-solving skills in a real-world scenario.
Authors
- Muhammad Al-Abdullah
- Alper Yayla
- Mohammed Al-Atoum
Institutions
- University of Jordan (JO)
Publication Details
- Journal
- Journal of Information Systems Education
- Published
- 2024-11-01
- DOI
- https://doi.org/10.62273/swqx4831
- Citations
- 1
- Primary Topic
- Information and Cyber Security
- Type
- article
- Field-Weighted Citation Impact
- 0.78