Program Overview

IT security management

Part-time training on cybersecurity, IT security for companies and authorities, for IT security officers and admins

The aim of this further training is to impart theoretical basics and practical knowledge to expand on the participants' own practical experience. Practical security, specific knowledge for securing a company's IT infrastructure, the creation of security concepts in ITSM, and the basics of ISO 27001 certification are some of the topics covered.

Study content

• Monday: Introduction to IT security management, risk management approaches, BSI-IT-Grundschutz and ISO 2700x, classification of security management in the criteria landscape.
• Tuesday: Creation of a security concept according to BSI-Grundschutz, practical development on a case study, creating a network plan, defining processes, carrying out protection needs analysis, modeling according to IT-Grundschutz.
• Wednesday: Basics of cryptography, symmetric and asymmetric encryption methods, key management, hash functions, cryptographic protocols, system security, buffer overflows and countermeasures, malware and botnets, web attacks.
• Thursday: Data protection, data protection in communication networks with a focus on the EU GDPR, rights of those affected, data protection principles, technical and organizational measures, privacy design strategies, technical basics, classic protection goals of IT security, hybrid cryptosystems.
• Friday: Penetration testing, security scanners, intrusion detection systems, practical security, sniffing and spoofing, vulnerabilities when using HTTPS.

Teachers

The further training is carried out by team-working and researching lecturers from the “Security & Privacy” department of the Computer Science Department at the University of Hamburg, under the scientific program management of Prof. Dr. Hannes Federrath.

Conclusion

The prerequisites for the award of a university certificate with 4 ECTS points are regular attendance, completion of the tasks set by the lecturers, and the creation of a 4 to 6-page term paper.

Target group and participation requirements

The in-service training is aimed at specialists and decision-makers who are responsible for IT security in a company or in an authority or who want to take on this responsibility. Relevant vocational training or a degree in computer science is not a prerequisite; career changers are also expressly addressed.

Time expenditure and costs

• Time required: 40 hours, five-day compact seminar.
• Costs: online course 1,390.00 euros, face-to-face course 1,560.00 euros.

Dates

• 02. until March 6, 2026: Face-to-face seminar in the Center for Continuing Education.
• 07. until September 11th, 2026: Online seminar via Zoom.

Seminar organization

The focus of the seminar organization is on providing good teaching on current topics. Teaching takes place with a didactically and content-appropriate mix of online and face-to-face events. Participants receive an ID from the University of Hamburg for the digital learning platform.

Advice and registration

Advice on further training from Dr. Michaela Tzankoff. Registration with registration form, tabular CV, proof of completed vocational training or university degree, and proof of at least one year of professional activity.