Risk Assessment and Security Audit
Get the full GTU study material, English & Gujarati textbook PDFs, syllabus curriculum, and solved previous year question papers.
English Book & Chapters
English Book Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesGTU Previous Year Papers
Papers Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesRisk Assessment and Security Audit Syllabus — Unit-wise Content
The official GTU curriculum for Risk Assessment and Security Audit (subject code 2725905) as prescribed for CS · Semester 2 divides the course into 6 units, covering 28 listed topics. The unit-wise breakdown below is read from the GTU syllabus document for this subject code, so you can check what the course actually covers before deciding which papers to attempt.
Download the official syllabus PDF (2725905)Unit 1 Introduction, what is risk and risk management, risk assessment,
- monitoring and review
- cyber system
Unit 2 What is cyber security, how does cyber security relate to
- information security
- how does cyber security relate to critical infrastructure protection
- how does cyber security relate to safety
- What is cyber risk
- communication and consultation of cyber risk
- cyber risk assessment
- monitoring and review of cyber risk
Unit 3 Context establishment, context, goals and objectives, target of
- interface to cyberspace and attack surface
- focus and assumption
- scale and risk evaluation criteria
Unit 4 Risk identification techniques, malicious risks, non-malicious
- risk analysis
- threat analysis
- vulnerability analysis
- likelihood of incidents
- consequences of incidents
Unit 5 Risk evaluation, consolidation of risk analysis results, evaluation
- of risk level
- risk aggregation
- risk grouping
- risk treatment identification
- risk acceptance
Unit 6 Two-factor measure, three-factor measure, many-factor measure,
- which measure to use for cyber risk?
- classification of scales
- qualitative versus quantitative risk assessment
- scale for likelihood
- scale for consequence
- what scale to use for cyber risk