Page Navigation

Module Descriptors

This page displays the selected Module Descriptor.

Printer friendly version Printer friendly version

Session: 2022/23

Last modified: 10/01/2023 10:56:47

Title of Module: Governance, Risk & Compliance

Code: COMP10075 SCQF Level: 10
(Scottish Credit and Qualifications Framework)
Credit Points: 20 ECTS: 10
(European Credit Transfer Scheme)
School:School of Computing, Engineering and Physical Sciences
Module Co-ordinator:Tony  Gurney

Summary of Module

The purpose of this module is to enable the IT professional to manage information assurance within an organisation to ensure information is processed legally and securely through risk-based decision making. 

The teaching and assessment contained in this module are specifically designed to encourage independent, critical thinking. In addition students are encouraged to work through problems both indpendently and as part of a group. Tutorials, as well as group interactions, are expressly structured to encourage the creation and dispersal of solutions using a critical approach to problem solving whilst bearing in mind best industry practice both legally and ethically.

Module Delivery Method
Face-To-FaceBlendedFully OnlineHybridCHybridOWork-based Learning
check mark

Term used to describe the traditional classroom environment where the students and the lecturer meet synchronously in the same room for the whole provision.

A mode of delivery of a module or a programme that involves online and face-to-face delivery of learning, teaching and assessment activities, student support and feedback. A programme may be considered “blended” if it includes a combination of face-to-face, online and blended modules. If an online programme has any compulsory face-to-face and campus elements it must be described as blended with clearly articulated delivery information to manage student expectations

Fully Online
Instruction that is solely delivered by web-based or internet-based technologies. This term is used to describe the previously used terms distance learning and e learning.

Online with mandatory face-to-face learning on Campus

Online with optional face-to-face learning on Campus

Work-based Learning
Learning activities where the main location for the learning experience is in the workplace.

Campus(es) for Module Delivery
The module will normally be offered on the following campuses / or by Distance/Online Learning: (Provided viable student numbers permit)
Paisley:Ayr:Dumfries:Lanarkshire:London:Distance/Online Learning:Other:




check mark




Term(s) for Module Delivery
(Provided viable student numbers permit).
Term 1


Term 2check markTerm 3


[Top of Page]

Learning Outcomes: (maximum of 5 statements)

On successful completion of this module the student will be able to:

L1. Critically apply governance frameworks and practices to direct and control the use of secure information technology in line with organisation goals.

L2. Develop and critically apply risk management, controls and auditing processes to enable organisational-level information assurance.

L3. Discuss significant legislation, standards, and codes of practice/ethics as they apply to IT and how to be compliant to these;

L4. Research the academic and professional literature, and use it to evaluate a given scenario to communicate findings to management via a professional level report and presentation.

Employability Skills and Personal Development Planning (PDP) Skills
SCQF Headings During completion of this module, there will be an opportunity to achieve core skills in:
Knowledge and Understanding (K and U) SCQF Level 10.

Governance models and frameworks, Information Assurance Methods; Related In- ternational Standards; Scottish, UK, EU and other International laws that relate to data privacy and protection, obligations of organisations for the management of data and communications; computer misuse and surveillance, elements of contractual and employment law.

Practice: Applied Knowledge and Understanding SCQF Level 10.

Understanding and application of elements of the frameworks. Risk management, contingency and continuity planning.

Generic Cognitive skills SCQF Level 10.

Logical assessment of open ended problems; distill and synthesise a variety of knowledge from external sources; development of an argument to articulate a case for the findings.

Communication, ICT and Numeracy Skills SCQF Level 10.

Professional report writing and presentation skills.

Autonomy, Accountability and Working with others SCQF Level 10.

Build effective client relationships.

Pre-requisites: Before undertaking this module the student should have undertaken the following:
Module Code:
Module Title:
Co-requisitesModule Code:
Module Title:

* Indicates that module descriptor is not published.

[Top of Page]

Learning and Teaching
Learning Activities
During completion of this module, the learning activities undertaken to achieve the module learning outcomes are stated below:
Student Learning Hours
(Normally totalling 200 hours):
(Note: Learning hours include both contact hours and hours spent on other learning activities)
Lecture/Core Content Delivery24
Tutorial/Synchronous Support Activity12
Laboratory/Practical Demonstration/Workshop12
Independent Study152
200 Hours Total

**Indicative Resources: (eg. Core text, journals, internet access)

The following materials form essential underpinning for the module content and ultimately for the learning outcomes:

Trim, P.R.J., and Lee, Y-I. (2014). Cyber Security Management: A Governance, Risk and Compliance Framework. Gower Publishing

Schaub, G. (2018) Understanding Cybersecurity: Emerging Governance and Strategy. Rowman & Littlefield International

Kolah, A. (2018) The GDPR Handbook: A Guide to Implementing the EU General Data Protection Regulation. Kogan Page

(**N.B. Although reading lists should include current publications, students are advised (particularly for material marked with an asterisk*) to wait until the start of session for confirmation of the most up-to-date material)

Engagement Requirements

In line with the Academic Engagement Procedure, Students are defined as academically engaged if they are regularly engaged with timetabled teaching sessions, course-related learning resources including those in the Library and on the relevant learning platform, and complete assessments and submit these on time. Please refer to the Academic Engagement Procedure at the following link: Academic engagement procedure

[Top of Page]

Supplemental Information

Programme BoardComputing
Assessment Results (Pass/Fail) No
Subject PanelBusiness & Applied Computing
ModeratorMalcolm Bronte-Stewart
External ExaminerM Davis
Accreditation Details
Version Number


[Top of Page]

Assessment: (also refer to Assessment Outcomes Grids below)
Coursework (100%) - In this coursework the student will act as an information security consultant for a specific organisation. The student will undertake a review of the information security governance and management processes within the organisation.
(N.B. (i) Assessment Outcomes Grids for the module (one for each component) can be found below which clearly demonstrate how the learning outcomes of the module will be assessed.
(ii) An indicative schedule listing approximate times within the academic calendar when assessment is likely to feature will be provided within the Student Handbook.)

Assessment Outcome Grids (Footnote A.)

Component 1
Assessment Type (Footnote B.) Learning Outcome (1) Learning Outcome (2) Learning Outcome (3) Learning Outcome (4) Weighting (%) of Assessment ElementTimetabled Contact Hours
Case studycheck markcheck markcheck markcheck mark100120
Combined Total For All Components100% 120 hours

A. Referred to within Assessment Section above
B. Identified in the Learning Outcome Section above

[Top of Page]

  1. More than one assessment method can be used to assess individual learning outcomes.
  2. Schools are responsible for determining student contact hours. Please refer to University Policy on contact hours (extract contained within section 10 of the Module Descriptor guidance note).
    This will normally be variable across Schools, dependent on Programmes &/or Professional requirements.

Equality and Diversity
This module is suitable for any student. The assessment regime will be applied flexibly so that a student who can attain the practical outcomes of the module will not be disadvantaged. When a student discloses a disability, or if a tutor is concerned about a student, the tutor in consultation with the School Enabling Support co-ordinator will agree the appropriate adjustments to be made.
UWS Equality and Diversity Policy
(N.B. Every effort will be made by the University to accommodate any equality and diversity issues brought to the attention of the School)

2014 University of the West of Scotland

University of the West of Scotland is a Registered Scottish Charity.

Charity number SC002520.