Information System Security Management

Elements of law
Elements of criminal proceedings
o Actors of the criminal trial
o Stages of criminal proceedings
o Means of gathering evidence in criminal proceedings
o Technical investigations in criminal proceedings (expert report, ct, evidentiary incident )
Elements of civil procedure
o Types of proceedings (civil, protective)
o Steps of civil proceedings
o Means of gathering evidence in the civil process
o Technical inspections in the civil process
The digital document
o Definition of IT document
o Electronic signatures: technical and legal aspects
o The evidentiary value of the computer document
Other relevant standards
o Normativa privacy
o Criminal liability of institutions: Legislative Decree no. 231/2001
o Relevant aspects on the management of the informative systems regarding D.Lgs. 231/2001
o Labour law and job act
o Control of employees and collaborators
o Video surveillance of workplaces
o Intellectual property, industrial secrecy and copyright
Technical aspects of risk assessment, prevention and control
ISO standard
o ISO/IEC 27037
o ISO/IEC 27035
o ISO/IEC 27038
o ISO/IEC 19011
Response to IT incidents
o The risk assessment phase
o The incident response
o Forensic readiness plan
Cases of study
o Management of company information systems for the protection of industrial property
o Management of company information systems for staff control
o Management of health information systems
o Technical measures for process and software certification
simulation
o A practical case: risk assessment
o A Practical Case: Response to the Accident
o A practical case: trial simulation
Finally, the teaching also includes reproductions in technical laboratories, practical exercises and real simulations of debates, aimed at deepening roles, skills and dynamics both corporate but also for some cases of trial.