Strategic management of digital security and resilience

Data and information are the nervous system of modern organizations—and an attractive target. Ransomware, data breaches, and supply chain attacks not only affect systems, but also continuity, reputation, and trust. At the same time, European frameworks such as NIS2, DORA, and the Cyber Resilience Act are raising the bar for governance and supervision. Security is therefore no longer a purely technical issue, but a strategic theme at the boardroom table.

In the Data and Information Security master's module, you will look at information security from a strategic perspective. You will examine which data and information flows are truly crucial, how regulations translate into governance, policy, and controls, and how to design a security approach that fits your organization's risk appetite and goals. You will explicitly view security and data management as strategic capabilities: for trust, continuity, and value creation.

Using frameworks such as MITRE ATT&CK and the cyber kill chain, you will delve into the current threat landscape. You will analyze attacks, examine how prevention, detection, response, and recovery interact, and explore the role of cyber insurance and ransom dilemmas within a broader risk strategy. Realistic scenarios involving incident response and crisis communication show how technology, decision-making, legal obligations, and public perception come together under pressure.

This module does not give you a checklist, but a compass for data and information security. You will combine regulations, threat assessments, and organizational choices into a coherent approach that you can immediately apply to your own organization or client case. You will leave with clear language and frameworks to engage management, IT, risk, and business, as well as concrete starting points for a multi-year plan that structurally strengthens digital resilience and the strategic value of data.