Introductory description

This module introduces key cybersecurity issues in the financial sector, focusing on the technologies, threats, risks, and governance challenges that affect modern banking, fintech, payment systems, and digital financial ecosystems. The module combines foundational cybersecurity principles and concepts such as cyber risk and controls with practical financial applications, including data protection, fraud prevention, cloud and API security, blockchain security, operational resilience, and regulatory compliance. Through case studies, simulations, and strategic analysis, students will develop the ability to identify cyber threats and required security controls, evaluate security frameworks, and understand how cybersecurity supports trust, stability, and innovation in digital finance. The purpose of the module is not to train students to become cyber technology experts, but to teach students, who are to perform various organizational roles (also within cybersecurity), to be aware of and know how to address diverse cyber security issues in digital finance.

Module web page

Module aims

Outline syllabus

This is an indicative module outline only to give an indication of the sort of topics that may be covered. Actual sessions held may differ.

Whilst the module teaching is not a technical cyber security coding course, it will cover a wide range of subject matter knowledge in this space which is essential to understand the risks and threats of technology. It will also consider social and psychological behavior techniques as well. This will exceed the general cyber security certifications available and use applied business strategy theory with cyber security knowledge in a business context.

We relate the module to leading InfoSec certifications CompTIA Security+, GSEC SANS GIAC Security Essentials, including CISSP Certified information Systems Security Professional, CEH certified ethical hacker, ECSA - EC-Council Certified Security Analyst, CISM Certified Information Security Manager, ISACA Certified Information Security Auditor CISA, (ISC)² Certified Cloud Security Professional CCSP, CRISC Certified in Risk and Information Systems Control. GCHQ Certified Training (GCT)

This module is not part of the GCHQ Degree Certification, or the NCSC certification program.

Learning outcomes

By the end of the module, students should be able to:

• Demonstrate in-depth knowledge of and ability to critically evaluate key cybersecurity concepts (e.g., organizational and security controls, defence in depth, vulnerabilities, incident response, situational awareness, cybersecurity awareness and training), frameworks and standards (e.g., NIST) and theories (e.g., deterrence theory).
• Demonstrate understanding of current and emerging cyber security issues in digital finance, trends and research from a business a management perspective
• Demonstrate comprehensive understanding and ability to outline a complete anatomy of a significant FinTech security incident from initial compromise through impact, response, and recovery, identifying the governance implications at each stage
• Identify, analyze and outline the principal technical and operational security controls relevant to financial organizations in terms accessible to a non-technical commercial audience, explaining the purpose, limitations, and equity implications of each
• Demonstrate critical situation analysis from a cybersecurity view
• Demonstrate creativity in determining cyber-attacks and required defences
• Demonstrate thinking skills in anticipating moves and counter moves of threat agents, and the cost and effectiveness of these counter moves

Indicative reading list

Reading lists can be found in Talis

Interdisciplinary

The module explores cybersecurity from socio-technical perspective. We also explore regulatory and societal issues related to cybersecurity.

Subject specific skills

Design, implement and assess a comprehensive cybersecurity program for a financial organization (including incident response plan, business continuity plan).
Design and evaluate security controls for a financial organization.
Exhibit ability to perform key analyses (e.g., threat and risk assessments; identify mid-term and long-term impacts of cyber-attacks on financial organizations and strategies for mitigating these impacts; apply key cybersecurity frameworks and principles) and critically evaluate findings
Identify and classify the principal cybersecurity threats facing FinTech organisations by actor, motivation, method, and target

Transferable skills

Analytical skills
Critical thinking skills
Written skills