This Unit introduces the key concepts, tools, and management processes for the design, implementation, and assessment of data privacy and information security requirements for businesses in the information age. Students learn to plan for cybersecurity, including security governance and risk assessment. They gain skills for employing the operational and technical measures used to achieve effective cybersecurity functions. They develop skills for auditing and monitoring the performance of cybersecurity systems, including security performance management and security monitoring and reporting. The subject enables students to examine both business and security operations procedurally and to develop contingency planning, risk assessment, risk management, and compliance standards for various businesses. The goal is to provide students with the foundations required to apply information security management at a corporate level.