MSc

MSc MS Information Security Management

Information security degree. 6 assessed courses, 1,800 notional hours, tuition-free.

Online or on campus

18 months180 creditsEnglish

Overview

Information security degree. MS Information Security Management at Frontier Innovation University: 6 assessed courses, 180 credits and 1,800 notional learning hours, at 10 hours per credit. The hours on each course add up to that total. Online study is tuition-free. Campus study in Austin is a separate published fee. This award does not confer a teaching licence, QTS, or GTCS registration. MS Information Security Management is taught as one award, not a list of unrelated modules. The published length is 18 months, and the credit total is 180. Students move from The working week in Information Security Management through The working week in Information Security Management; Evidence in Information Security Management; The system around Information Security Management; Rules that bind Information Security Management; A manager's brief in Information Security Management; Capstone in Information Security Management, and finish on Capstone in Information Security Management. Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk. The award is built so that a graduate can do the following in practice: Produce a professional file in Information Security Management Choose a method and write what the evidence cannot support Keep a record a third party can review Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass. The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.

Each credit is 10 notional learning hours. The courses add up to 180 credits and 1,800 hours. This award does not confer a teaching licence, QTS, or GTCS registration.

Who This Program Is For

People already working around Information Security Management
Career-changers who can study without leaving their city
Teams who need a file they can review, not a slogan

Faculty spotlight

Frontier Innovation University supervises the courses and the final assessed file. Supervision is assigned from the school that owns the award.

How you can study

Study options & delivery

Online pathway· Flexible remote

Complete your MSc MS Information Security Management fully online from anywhere in the world with faculty-led modules and flexible scheduling.

On-campus pathway· £4,100 / $5,200/year

Attend seminars and access facilities in person at Frontier Innovation University. Campus tuition and campus examinations are charged.

Apply online →Apply for campus →View fee schedule

What You Will Learn

Produce a professional file in Information Security Management
Choose a method and write what the evidence cannot support
Keep a record a third party can review
State the limit of the award
Submit the final project inside the published hours

Curriculum

Stage 1 — 900 hours

Code	Course	Credits · hours
SC0O101	The working week in Information Security Management The working week in Information Security Management (SC0O101) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using The working week in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SC0O101-M1 · Assets, trust boundaries, and the adversary model — The working week in Information Security Management SC0O101-M2 · Threat modelling and attack paths — The working week in Information Security Management SC0O101-M3 · Identity, logging, and segmentation — The working week in Information Security Management SC0O101-M4 · Detection, containment, and evidence — The working week in Information Security Management SC0O101-M5 · Residual risk and what a control does not stop — The working week in Information Security Management SC0O101-M6 · Defensive design, test plan, and after-action review — The working week in Information Security Management	30 · 300 h
SCANN02	Evidence in Information Security Management Evidence in Information Security Management (SCANN02) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Evidence in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SCANN02-M1 · Assets, trust boundaries, and the adversary model — Evidence in Information Security Management SCANN02-M2 · Threat modelling and attack paths — Evidence in Information Security Management SCANN02-M3 · Identity, logging, and segmentation — Evidence in Information Security Management SCANN02-M4 · Detection, containment, and evidence — Evidence in Information Security Management SCANN02-M5 · Residual risk and what a control does not stop — Evidence in Information Security Management SCANN02-M6 · Defensive design, test plan, and after-action review — Evidence in Information Security Management	30 · 300 h
SCKN903	The system around Information Security Management The system around Information Security Management (SCKN903) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using The system around Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SCKN903-M1 · Assets, trust boundaries, and the adversary model — The system around Information Security Management SCKN903-M2 · Threat modelling and attack paths — The system around Information Security Management SCKN903-M3 · Identity, logging, and segmentation — The system around Information Security Management SCKN903-M4 · Detection, containment, and evidence — The system around Information Security Management SCKN903-M5 · Residual risk and what a control does not stop — The system around Information Security Management SCKN903-M6 · Defensive design, test plan, and after-action review — The system around Information Security Management	30 · 300 h

Code

Course

Credits · hours

SC0O101

The working week in Information Security Management

The working week in Information Security Management (SC0O101) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using The working week in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SC0O101-M1 · Assets, trust boundaries, and the adversary model — The working week in Information Security Management
SC0O101-M2 · Threat modelling and attack paths — The working week in Information Security Management
SC0O101-M3 · Identity, logging, and segmentation — The working week in Information Security Management
SC0O101-M4 · Detection, containment, and evidence — The working week in Information Security Management
SC0O101-M5 · Residual risk and what a control does not stop — The working week in Information Security Management
SC0O101-M6 · Defensive design, test plan, and after-action review — The working week in Information Security Management

30 · 300 h

SCANN02

Evidence in Information Security Management

Evidence in Information Security Management (SCANN02) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Evidence in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SCANN02-M1 · Assets, trust boundaries, and the adversary model — Evidence in Information Security Management
SCANN02-M2 · Threat modelling and attack paths — Evidence in Information Security Management
SCANN02-M3 · Identity, logging, and segmentation — Evidence in Information Security Management
SCANN02-M4 · Detection, containment, and evidence — Evidence in Information Security Management
SCANN02-M5 · Residual risk and what a control does not stop — Evidence in Information Security Management
SCANN02-M6 · Defensive design, test plan, and after-action review — Evidence in Information Security Management

30 · 300 h

SCKN903

The system around Information Security Management

The system around Information Security Management (SCKN903) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using The system around Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SCKN903-M1 · Assets, trust boundaries, and the adversary model — The system around Information Security Management
SCKN903-M2 · Threat modelling and attack paths — The system around Information Security Management
SCKN903-M3 · Identity, logging, and segmentation — The system around Information Security Management
SCKN903-M4 · Detection, containment, and evidence — The system around Information Security Management
SCKN903-M5 · Residual risk and what a control does not stop — The system around Information Security Management
SCKN903-M6 · Defensive design, test plan, and after-action review — The system around Information Security Management

30 · 300 h

Stage 2 — 900 hours

Code	Course	Credits · hours
SCUMU04	Rules that bind Information Security Management Rules that bind Information Security Management (SCUMU04) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Rules that bind Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SCUMU04-M1 · Assets, trust boundaries, and the adversary model — Rules that bind Information Security Management SCUMU04-M2 · Threat modelling and attack paths — Rules that bind Information Security Management SCUMU04-M3 · Identity, logging, and segmentation — Rules that bind Information Security Management SCUMU04-M4 · Detection, containment, and evidence — Rules that bind Information Security Management SCUMU04-M5 · Residual risk and what a control does not stop — Rules that bind Information Security Management SCUMU04-M6 · Defensive design, test plan, and after-action review — Rules that bind Information Security Management	30 · 300 h
SD4MG05	A manager's brief in Information Security Management A manager's brief in Information Security Management (SD4MG05) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using A manager's brief in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SD4MG05-M1 · Assets, trust boundaries, and the adversary model — A manager's brief in Information Security Management SD4MG05-M2 · Threat modelling and attack paths — A manager's brief in Information Security Management SD4MG05-M3 · Identity, logging, and segmentation — A manager's brief in Information Security Management SD4MG05-M4 · Detection, containment, and evidence — A manager's brief in Information Security Management SD4MG05-M5 · Residual risk and what a control does not stop — A manager's brief in Information Security Management SD4MG05-M6 · Defensive design, test plan, and after-action review — A manager's brief in Information Security Management	30 · 300 h
SDEM206	Capstone in Information Security Management Capstone in Information Security Management (SDEM206) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Capstone in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. SDEM206-M1 · Assets, trust boundaries, and the adversary model — Capstone in Information Security Management SDEM206-M2 · Threat modelling and attack paths — Capstone in Information Security Management SDEM206-M3 · Identity, logging, and segmentation — Capstone in Information Security Management SDEM206-M4 · Detection, containment, and evidence — Capstone in Information Security Management SDEM206-M5 · Residual risk and what a control does not stop — Capstone in Information Security Management SDEM206-M6 · Defensive design, test plan, and after-action review — Capstone in Information Security Management	30 · 300 h

Code

Course

Credits · hours

SCUMU04

Rules that bind Information Security Management

Rules that bind Information Security Management (SCUMU04) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Rules that bind Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SCUMU04-M1 · Assets, trust boundaries, and the adversary model — Rules that bind Information Security Management
SCUMU04-M2 · Threat modelling and attack paths — Rules that bind Information Security Management
SCUMU04-M3 · Identity, logging, and segmentation — Rules that bind Information Security Management
SCUMU04-M4 · Detection, containment, and evidence — Rules that bind Information Security Management
SCUMU04-M5 · Residual risk and what a control does not stop — Rules that bind Information Security Management
SCUMU04-M6 · Defensive design, test plan, and after-action review — Rules that bind Information Security Management

30 · 300 h

SD4MG05

A manager's brief in Information Security Management

A manager's brief in Information Security Management (SD4MG05) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using A manager's brief in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SD4MG05-M1 · Assets, trust boundaries, and the adversary model — A manager's brief in Information Security Management
SD4MG05-M2 · Threat modelling and attack paths — A manager's brief in Information Security Management
SD4MG05-M3 · Identity, logging, and segmentation — A manager's brief in Information Security Management
SD4MG05-M4 · Detection, containment, and evidence — A manager's brief in Information Security Management
SD4MG05-M5 · Residual risk and what a control does not stop — A manager's brief in Information Security Management
SD4MG05-M6 · Defensive design, test plan, and after-action review — A manager's brief in Information Security Management

30 · 300 h

SDEM206

Capstone in Information Security Management

Capstone in Information Security Management (SDEM206) is a 30-credit course on MS Information Security Management, with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Capstone in Information Security Management as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

SDEM206-M1 · Assets, trust boundaries, and the adversary model — Capstone in Information Security Management
SDEM206-M2 · Threat modelling and attack paths — Capstone in Information Security Management
SDEM206-M3 · Identity, logging, and segmentation — Capstone in Information Security Management
SDEM206-M4 · Detection, containment, and evidence — Capstone in Information Security Management
SDEM206-M5 · Residual risk and what a control does not stop — Capstone in Information Security Management
SDEM206-M6 · Defensive design, test plan, and after-action review — Capstone in Information Security Management

30 · 300 h

Career Paths

Information Security Management lead
Information Security Management analyst
Information Security Management coordinator
Advisor, Information Security Management
Project officer, Information Security Management

Program Highlights

180 credits · 1,800 notional hours · 6 courses
Course hours add up to the programme total
information security degree
Online study is tuition-free. Campus study in Austin is a separate published fee.

Assessment

Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.

Admission requirements

Academic entry

A bachelor's degree from a recognised institution, or equivalent professional standing considered by admissions

Documents

A statement of about 500 words on why this award fits your work
Two references, academic or professional
A CV

Programme questions

How long is the MSc MS Information Security Management?

The published duration is 18 months. Teaching language: English. Actual time-to-complete depends on mode and any recognised prior learning.

Can I study this from my country?

You may study this award fully online from your country, or — where published — on campus at Frontier. Online study does not require a student visa. Campus study may.

What does it cost?

Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.

What are the entry requirements?

Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.

How is the programme assessed?

Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.

Will this award be recognised where I live?

Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Frontier Innovation University publishes verification pages for certificates. We do not claim automatic equivalence in every country.

How do I apply?

Start an application on this website. Progress is saved from the first step. Admissions: admissions@frontuni.com.

Recognized & Accredited

Loading…