网络安全风险管理与控制

默认只展示每周独有的知识重点；节奏、考核、Tutorial 和避坑信息按需展开。

1. 1

   Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals Definition of cyb

   ### 📖 核心知识点：Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals Definition of cyber-risks, and cyber-risk taxonomies. Risk management standards and exploration of their relationships with cybersecurity risk management: ISO31000; ISO27001-2. The attackers' perspective on cybersecurity risk management. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals Definition of cyber-risks, and cyber-risk taxonomies. Risk management standards and exploration of their relationships with cybersecurity risk management: ISO31000; ISO27001-2. The attackers' perspective on cybersecurity risk management., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals Definition of cyber-risks, and cyber-risk taxonomies. Risk management standards and exploration of their relationships with cybersecurity risk management: ISO31000; ISO27001-2. The attackers' perspective on cybersecurity risk management.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   IntroductiontoBISM7620andCyberRiskManagementBlock1Cybersecurity
2. 2

   Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals (independent stud

   ### 📖 核心知识点：Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals (independent study session) 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals (independent study session), analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Introduction to BISM7620 and Cyber Risk Management Block 1: Cybersecurity risk management fundamentals (independent study session)”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   IntroductiontoBISM7620andCyberRiskManagementBlock1Cybersecurity
3. 3

   IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. The thre

   ### 📖 核心知识点：IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. The three lines of defence model. The five lines of assurance model. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. The three lines of defence model. The five lines of assurance model., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. The three lines of defence model. The five lines of assurance model.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   ITandCybersecuritygovernancefocusonrisksBlock2Relationships
4. 4

   IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. (indepen

   ### 📖 核心知识点：IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. (independent study session) 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. (independent study session), analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“IT and Cybersecurity governance: focus on risks Block 2: Relationships between IT and Cybersecurity governance. (independent study session)”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   ITandCybersecuritygovernancefocusonrisksBlock2Relationships
5. 5

   Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersec

   ### 📖 核心知识点：Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks. Cyber-risk controls. Cyber threat intelligence as the basis for solid risk management practices. Leadership in Risk management and Audit: the role of the Chief Audit Executive 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks. Cyber-risk controls. Cyber threat intelligence as the basis for solid risk management practices. Leadership in Risk management and Audit: the role of the Chief Audit Executive, analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks. Cyber-risk controls. Cyber threat intelligence as the basis for solid risk management practices. Leadership in Risk management and Audit: the role of the Chief Audit Executive”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   RiskandauditfunctioncybersecurityrolesBlock3
6. 6

   Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersec

   ### 📖 核心知识点：Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks (independent study session) 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks (independent study session), analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Risk and audit function and cybersecurity roles Block 3: Risk and audit function within organisations: focus on cybersecurity risks (independent study session)”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   RiskandauditfunctioncybersecurityrolesBlock3
7. 7

   Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of D

   ### 📖 核心知识点：Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives. Technical vs Non-technical cybersecurity: what balance? Communication and consultation in cyber-risk management: overview of best practices and most common issues. Cyber-risk frameworks. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives. Technical vs Non-technical cybersecurity: what balance? Communication and consultation in cyber-risk management: overview of best practices and most common issues. Cyber-risk frameworks., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives. Technical vs Non-technical cybersecurity: what balance? Communication and consultation in cyber-risk management: overview of best practices and most common issues. Cyber-risk frameworks.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   CommunicatingrisksacrosstheorganisationBlock4
8. 8

   Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of D

   ### 📖 核心知识点：Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives (independent study session) 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives (independent study session), analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Communicating risks across the organisation Block 4: Communicating risks across the organisation: the role of Board of Directors and Executives (independent study session)”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   CommunicatingrisksacrosstheorganisationBlock4
9. 9

   Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Cyber-resilience: wha

   ### 📖 核心知识点：Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Cyber-resilience: what definitions? Why is it important? How do you measure it? New forms of cyber-risk protection: elements of cyber-insurance 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Cyber-resilience: what definitions? Why is it important? How do you measure it? New forms of cyber-risk protection: elements of cyber-insurance, analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Cyber-resilience: what definitions? Why is it important? How do you measure it? New forms of cyber-risk protection: elements of cyber-insurance”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

   OpenissuesincybersecurityriskmanagementBlock5
10. 10

    Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Labour Day Public Hol

    ### 📖 核心知识点：Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Labour Day Public Holiday - Monday 4th May 2026 - Check Blackboard for announcements about affected classes. 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Labour Day Public Holiday - Monday 4th May 2026 - Check Blackboard for announcements about affected classes., analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Open issues in cybersecurity risk management Block 5: Open issues in cybersecurity risk management Labour Day Public Holiday - Monday 4th May 2026 - Check Blackboard for announcements about affected classes.”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

    OpenissuesincybersecurityriskmanagementBlock5
11. 11

    The future of cybersecurity risk management Block 6: The future of cybersecurity risk management. Cyber-risks and new te

    ### 📖 核心知识点：The future of cybersecurity risk management Block 6: The future of cybersecurity risk management. Cyber-risks and new technologies: what risks and what opportunities? A deep-dive into innovative applications in the protection from cyber-risks Is cyber-risk management overrated? 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: The future of cybersecurity risk management Block 6: The future of cybersecurity risk management. Cyber-risks and new technologies: what risks and what opportunities? A deep-dive into innovative applications in the protection from cyber-risks Is cyber-risk management overrated?, analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“The future of cybersecurity risk management Block 6: The future of cybersecurity risk management. Cyber-risks and new technologies: what risks and what opportunities? A deep-dive into innovative applications in the protection from cyber-risks Is cyber-risk management overrated?”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

    ThefutureofcybersecurityriskmanagementBlock6
12. 12

    The future of cybersecurity risk management Block 6: The future of cybersecurity risk management (independent study sess

    ### 📖 核心知识点：The future of cybersecurity risk management Block 6: The future of cybersecurity risk management (independent study session) 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: The future of cybersecurity risk management Block 6: The future of cybersecurity risk management (independent study session), analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“The future of cybersecurity risk management Block 6: The future of cybersecurity risk management (independent study session)”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

    ThefutureofcybersecurityriskmanagementBlock6
13. 13

    Wrap-up session Wrap-up session with students on the overall contents of the course

    ### 📖 核心知识点：Wrap-up session Wrap-up session with students on the overall contents of the course 本周主题来自官方 Course Profile 的 Learning activities。学习建议是先完成概念定义和关键术语对齐，再把 lecture 示例转成你自己的步骤模板，最后用 tutorial/workshop 练习验证是否能在新场景下迁移。这样可以把“听懂”转成“会做、会讲、会比较方案”。 - **核心概念/公式**: Wrap-up session Wrap-up session with students on the overall contents of the course, analysis, modelling, SQL/Python, architecture ⏰ **本周节奏**: 难度 ⭐⭐⭐ | 预计投入 9h（Lecture 2h + 自学 4h + 作业/Lab 3h） 🎯 **考试关联**: 常见考法是定义辨析 + 场景应用 + 方案取舍，建议按“问题-方法-理由”结构作答。 🧪 **Tutorial/Lab**: 围绕“Wrap-up session Wrap-up session with students on the overall contents of the course”完成练习并整理错因复盘。 📌 **作业关联**: 与当周 assignment/project 模块直接相关，建议本周产出可运行第一版。 ⚠️ **易错点**: 复习时只看结论不做推导，导致考试应用题失分。 (BISM7620)）

    Wrap-upsessionwithstudentsontheoverallcontents