CS430 EU Digital Governance and Cybersecurity Policy
CS430 EU Digital Governance and Cybersecurity Policy
Syllabus | International University of Sarajevo - Last Update on Sep 09, 2026
Syllabus Quick Jump
Search and navigate to any syllabus instantly
Computer Sciences and Engineering
Amal Mersni
Course Lecturer
Course Objectives
EU Digital Governance and Cybersecurity Policy examines how the European Union governs cybersecurity and the digital space. The course covers key EU institutions and legal instruments, including the GDPR, the NIS 2 Directive, the Cybersecurity Act, the Digital Services Act, the AI Act, and the Cyber Resilience Act. The course connects these frameworks to current issues such as critical infrastructure protection, AI governance, cyber diplomacy, disinformation, surveillance, digital rights, and a sustainable digital future. It is designed for students in social sciences and EU studies, as well as IT engineering students who need to understand how EU law and policy shape cybersecurity practice. Through interdisciplinary team work, students analyze realistic cybersecurity scenarios and translate EU regulatory requirements into technical, organizational, and policy measures. The final project requires students to develop an EU-aligned cybersecurity governance proposal for a selected case.
Learning Outcomes
After successful completion of the course, the student will be able to:
Course Materials
Required Textbook
No required textbook. The course uses official EU and ENISA materials as primary readings.
Additional Literature
European Commission & High Representative. (2020). The EU's cybersecurity strategy for the digital decade (JOIN(2020) 18 final). https://digital-strategy.ec.europa.eu/en/library/eus-cybersecurity-strategy-digital-decade-0 European Union Agency for Cybersecurity. (2025). ENISA threat landscape 2025. https://doi.org/10.2824/1946374 European Union Agency for Cybersecurity. (2025). NIS2 technical implementation guidance. https://www.enisa.europa.eu/publications/nis2-technical-implementation-guidance Directive (EU) 2022/2555 (NIS 2 Directive). http://data.europa.eu/eli/dir/2022/2555/oj Regulation (EU) 2016/679 (General Data Protection Regulation). http://data.europa.eu/eli/reg/2016/679/oj Regulation (EU) 2019/881 (Cybersecurity Act). http://data.europa.eu/eli/reg/2019/881/oj Regulation (EU) 2022/2065 (Digital Services Act). http://data.europa.eu/eli/reg/2022/2065/oj Regulation (EU) 2024/1689 (Artificial Intelligence Act). http://data.europa.eu/eli/reg/2024/1689/oj Regulation (EU) 2024/2847 (Cyber Resilience Act). http://data.europa.eu/eli/reg/2024/2847/oj Council of the European Union. (2017). Framework for a joint EU diplomatic response to malicious cyber activities (Cyber Diplomacy Toolbox) (Doc. 9916/17).Teaching Methods
Lectures; guided discussions; analysis of EU legal and policy documents; case-based learning; EU implementation analysis; interdisciplinary team project and presentation.
Weekly Topics
| Week | Topic | Readings / References |
|---|---|---|
| 1 | Introduction to EU digital governance and cybersecurity policy; the EU regulatory approach | EU Cybersecurity Strategy |
| 2 | GDPR: data privacy rights and data protection by design | GDPR (Regulation 2016/679) |
| 3 | The NIS Directive and the NIS 2 Directive; risk-management and security measures | NIS 2 Directive (Directive 2022/2555); ENISA NIS2 Technical Implementation Guidance |
| 4 | The EU Cybersecurity Act, ENISA, and EU cybersecurity certification (EUCC) | Cybersecurity Act (Regulation 2019/881) |
| 5 📍 | Cyber resilience for critical infrastructure; the Cyber Resilience Act and secure-by-design | Cyber Resilience Act (Regulation 2024/2847) |
| 6 | Digital content regulation and governance: the Digital Services Act | Digital Services Act (Regulation 2022/2065) |
| 7 | AI governance and ethics: the EU AI Act and requirements for high-risk AI | AI Act (Regulation 2024/1689) |
| 8 | Midterm Examination | Course materials |
| 9 | Cyber threats, geopolitics, and international collaboration | ENISA Threat Landscape 2025 |
| 10 | EU cyber diplomacy and the Cyber Diplomacy Toolbox | Cyber Diplomacy Toolbox |
| 11 | Surveillance and privacy in the digital age | GDPR; EU digital rights framework |
| 12 | Digital disinformation and media manipulation | ENISA Threat Landscape 2025; Digital Services Act |
| 13 | Cyberbullying, online harassment, and EU legal protections | Digital Services Act; EU legal framework |
| 14 | Cybersecurity awareness, education, globalization, and the digital skills gap | EU Cybersecurity Strategy; ENISA resources |
| 15 | Democracy, sustainability, and a green digital future; team governance project presentations and review | Course materials |
Course Schedule (All Sections)
Office Hours & Room
Assessment Methods and Criteria
Assessment Components
Final Exam
AI: Not AllowedAlignment with Learning Outcomes : 1 2 3 4
Midterm Exam
AI: Not AllowedAlignment with Learning Outcomes : 1 2
EU Policy and Implementation Assignments
AI: Consult InstructorAlignment with Learning Outcomes : 2 3 4
Team Project: EU-Aligned Cybersecurity Governance Proposal and Presentation
AI: Consult InstructorAlignment with Learning Outcomes : 3 4 5
IUS Grading System
| Grading Scale | IUS Grading System | IUS Coeff. | Letter (B&H) | Numerical (B&H) |
|---|---|---|---|---|
| 0 - 44 | F | 0 | F | 5 |
| 45 - 54 | E | 1 | ||
| 55 - 64 | C | 2 | E | 6 |
| 65 - 69 | C+ | 2.3 | D | 7 |
| 70 -74 | B- | 2.7 | ||
| 75 - 79 | B | 3 | C | 8 |
| 80 - 84 | B+ | 3.3 | ||
| 85 - 94 | A- | 3.7 | B | 9 |
| 95 - 100 | A | 4 | A | 10 |
Late Work Policy
Information about late submission policies will be shared during class and posted in this section. Please check back for official guidelines.
ECTS Credit Calculation
📚 Student Workload
This 6 ECTS credit course corresponds to 150 hours of total student workload, distributed as follows:
Teaching sessions
45 hours ⏳ (15 week × 3 h)
EU implementation exercises
12 hours ⏳ (3 week × 4 h)
Reading and EU document review
39 hours ⏳ (13 week × 3 h)
Midterm preparation and examination
8 hours ⏳ (1 week × 8 h)
Team governance project and presentation
36 hours ⏳ (6 week × 6 h)
Final preparation and examination
10 hours ⏳ (1 week × 10 h)
150 Total Workload Hours
6 ECTS Credits
Course Policies
Academic Integrity
All work submitted must be your own. Plagiarism, cheating, or any form of academic dishonesty will result in disciplinary action according to university policies. When in doubt about citation practices, consult the instructor.
Attendance Policy
Students are expected to adhere to the attendance requirements as outlined in the International University of Sarajevo Study Rules and Regulations. Excessive absences, whether excused or unexcused, may impact academic performance and eligibility for assessment. Mandatory sessions (e.g., labs, workshops) require attendance unless formally exempted. For detailed policies on absences, documentation, and penalties, please refer to the official university regulations.
Technology & AI Policy
Laptops/tablets may be used for note-taking only during lectures. Phones should be silenced and put away during all class sessions. Audio/video recording requires prior permission from the instructor.
Artificial Intelligence (AI) Usage: The use of AI tools (e.g., ChatGPT, Copilot, Gemini) varies by assessment component. Please refer to the AI usage indicator next to each assessment item in the Assessment Methods and Criteria section above. Submitting AI-generated content as your own work, where AI is not explicitly allowed, constitutes an academic integrity violation.
Communication Policy
All course-related communication should occur through official university channels (institutional email or SIS). Emails should include [CS430] in the subject line.
Academic Quality Assurance Policy
Course Academic Quality Assurance is achieved through Semester Student Survey. At the end of each academic year, the institution of higher education is obliged to evaluate work of the academic staff, or the success of realization of the curricula.
Learning Tips
Be prepared to contribute thoughtfully during class discussions, labs, or collaborative work. Active participation deepens understanding and encourages critical thinking.
Complete assigned readings or prep materials before class. Take notes, highlight key ideas, and jot down questions. Aim to grasp core concepts and their applications—not just facts.
Use course frameworks or methodologies to analyze problems, case studies, or projects. Begin early to allow time for reflection and refinement. Seek feedback to improve your work.
Don’t hesitate to reach out when something is unclear. Use office hours, discussion boards, or peer networks to clarify concepts and stay on track.
Syllabus Last Updated on Sep 09, 2026 | International University of Sarajevo
Print Syllabus
Referencing Curricula Print this page
| Course Code | Course Title | Weekly Hours* | ECTS | Weekly Class Schedule | ||||||
| T | P | |||||||||
| CS430 | EU Digital Governance and Cybersecurity Policy | 3 | 0 | 6 | ||||||
| Prerequisite | Senior Standing | It is a prerequisite to | - | |||||||
| Lecturer | Amal Mersni | Office Hours / Room / Phone |
A F1.6
|
|||||||
| amersni@ius.edu.ba | ||||||||||
| Assistant | Assistant E-mail | |||||||||
| Course Objectives | EU Digital Governance and Cybersecurity Policy examines how the European Union governs cybersecurity and the digital space. The course covers key EU institutions and legal instruments, including the GDPR, the NIS 2 Directive, the Cybersecurity Act, the Digital Services Act, the AI Act, and the Cyber Resilience Act. The course connects these frameworks to current issues such as critical infrastructure protection, AI governance, cyber diplomacy, disinformation, surveillance, digital rights, and a sustainable digital future. It is designed for students in social sciences and EU studies, as well as IT engineering students who need to understand how EU law and policy shape cybersecurity practice. Through interdisciplinary team work, students analyze realistic cybersecurity scenarios and translate EU regulatory requirements into technical, organizational, and policy measures. The final project requires students to develop an EU-aligned cybersecurity governance proposal for a selected case. |
|||||||||
| Textbook | No required textbook. The course uses official EU and ENISA materials as primary readings. | |||||||||
| Additional Literature |
|
|||||||||
| Learning Outcomes | After successful completion of the course, the student will be able to: | |||||||||
|
||||||||||
| Teaching Methods | Lectures; guided discussions; analysis of EU legal and policy documents; case-based learning; EU implementation analysis; interdisciplinary team project and presentation. | |||||||||
| Teaching Method Delivery | Face-to-face | Teaching Method Delivery Notes | ||||||||
| WEEK | TOPIC | REFERENCE | ||||||||
| Week 1 | Introduction to EU digital governance and cybersecurity policy; the EU regulatory approach | EU Cybersecurity Strategy | ||||||||
| Week 2 | GDPR: data privacy rights and data protection by design | GDPR (Regulation 2016/679) | ||||||||
| Week 3 | The NIS Directive and the NIS 2 Directive; risk-management and security measures | NIS 2 Directive (Directive 2022/2555); ENISA NIS2 Technical Implementation Guidance | ||||||||
| Week 4 | The EU Cybersecurity Act, ENISA, and EU cybersecurity certification (EUCC) | Cybersecurity Act (Regulation 2019/881) | ||||||||
| Week 5 | Cyber resilience for critical infrastructure; the Cyber Resilience Act and secure-by-design | Cyber Resilience Act (Regulation 2024/2847) | ||||||||
| Week 6 | Digital content regulation and governance: the Digital Services Act | Digital Services Act (Regulation 2022/2065) | ||||||||
| Week 7 | AI governance and ethics: the EU AI Act and requirements for high-risk AI | AI Act (Regulation 2024/1689) | ||||||||
| Week 8 | Midterm Examination | Course materials | ||||||||
| Week 9 | Cyber threats, geopolitics, and international collaboration | ENISA Threat Landscape 2025 | ||||||||
| Week 10 | EU cyber diplomacy and the Cyber Diplomacy Toolbox | Cyber Diplomacy Toolbox | ||||||||
| Week 11 | Surveillance and privacy in the digital age | GDPR; EU digital rights framework | ||||||||
| Week 12 | Digital disinformation and media manipulation | ENISA Threat Landscape 2025; Digital Services Act | ||||||||
| Week 13 | Cyberbullying, online harassment, and EU legal protections | Digital Services Act; EU legal framework | ||||||||
| Week 14 | Cybersecurity awareness, education, globalization, and the digital skills gap | EU Cybersecurity Strategy; ENISA resources | ||||||||
| Week 15 | Democracy, sustainability, and a green digital future; team governance project presentations and review | Course materials | ||||||||
| Assessment Methods and Criteria | Evaluation Tool | Quantity | Weight | Alignment with LOs | AI Usage |
| Final Exam | 1 | 30 | 1,2,3,4 | Not Allowed | |
| Semester Evaluation Components | |||||
| Midterm Exam | 1 | 15 | 1,2 | Not Allowed | |
| EU Policy and Implementation Assignments | 3 | 20 | 2,3,4 | Consult Instructor | |
| Team Project: EU-Aligned Cybersecurity Governance Proposal and Presentation | 1 | 35 | 3,4,5 | Consult Instructor | |
| *** ECTS Credit Calculation *** | |||||
| Activity | Hours | Weeks | Student Workload Hours | Activity | Hours | Weeks | Student Workload Hours | |||
| Teaching sessions | 3 | 15 | 45 | EU implementation exercises | 4 | 3 | 12 | |||
| Reading and EU document review | 3 | 13 | 39 | Midterm preparation and examination | 8 | 1 | 8 | |||
| Team governance project and presentation | 6 | 6 | 36 | Final preparation and examination | 10 | 1 | 10 | |||
| 0 | 0 | |||||||||
| 0 | 0 | |||||||||
| Total Workload Hours = | 150 | |||||||||
| *T= Teaching, P= Practice | ECTS Credit = | 6 | ||||||||
| Course Academic Quality Assurance: Semester Student Survey | Last Update Date: 28/09/2026 | |||||||||