Cybersecurity and Data Protection (DIGITAL, LEGAL AND MANAGEMENT SKILLS)

The vocational master programme intends to train professionals with a comprehensive understanding of corporate needs related to cybersecurity and data protection, who will specifically be able to:

- Assess the security architectures of an organisation using appropriate risk-analysis methods, in order to identify threats and vulnerabilities;
- Develop company policies in accordance with the most common best practices and standards (such as NIST Framework, COBIT, ISO 27000, ISO 31000), to better protect corporate systems against cyber attacks and incidents.
- Lay down procedures regarding governance, continuous control of systems, auditing, compliance management and operability management;
- Motivate collaborators and properly and adequately inform company managers about security-related risks, including their operational needs and security requirements;
- Plan and help to implement raise-awareness projects on the topic of information security, involving all company levels.

The programme will provide students with the necessary expertise and skills so that they are able to:

- Follow the latest technological developments in the field of cybersecurity and understand the evolution of technology, in order to introduce innovative solutions and new technologies in existing products, applications and services;
- Draft security policies drawing on internationally recognised standards and best practices, in order to define the organisational strategy, objectives and culture needed for ensuring the protection of data and computer systems from internal and external threats; set up the organisational structure in charge of corporate cybersecurity management, defining roles and responsibilities;
- Assess the cybersecurity risk underlying the company business, document potential risks and prepare cybersecurity risk management plans, by applying risk management policies and procedures as defined by the company;
- Comprehensively implement the corporate security policy and design tools to verify its application; manage all aspects of cyber incidents; periodically review specific strategies and policies drawing on past experiences, aiming for a continuous improvement of security levels.