CS440 EU Network Security and Resilience
Syllabus | International University of Sarajevo - Last Update on Sep 09, 2026
Syllabus Quick Jump
Search and navigate to any syllabus instantly
Computer Sciences and Engineering
Amal Mersni
Course Lecturer
Course Objectives
EU Network Security and Resilience provides a technical perspective on network security and resilience in line with European cybersecurity best practices. The course connects practical network-security work with key EU cybersecurity and resilience frameworks, including NIS2, the Cyber Resilience Act, the Critical Entities Resilience Directive, ETSI standards, and ENISA guidance. Students learn how EU cybersecurity requirements influence technical controls, monitoring, vulnerability management, incident response, continuity planning, cloud security, and critical-infrastructure resilience.
Learning Outcomes
After successful completion of the course, the student will be able to:
Course Materials
Required Textbook
No required textbook. Core readings are official EU legislation, ENISA publications, and ETSI standards. Recommended supplementary textbook: Tjoa, S., Gafić, M., & Kieseberg, P. (2024). Cyber resilience fundamentals. Springer.
Additional Literature
"EU cybersecurity legislation: the NIS2 Directive, the Cyber Resilience Act, and the Critical Entities Resilience Directive. ENISA technical guidance and publications on cybersecurity and resilience. ETSI cybersecurity standards."Teaching Methods
Lectures
EU case studies
Hands-on labs
Workshops
And course project.
Weekly Topics
| Week | Topic | Readings / References |
|---|---|---|
| 1 | EU network security and resilience: regulatory landscape and technical responsibilities | EU cybersecurity frameworks (NIS2, CRA, CER); ENISA guidance |
| 2 | Translating EU cybersecurity requirements into technical controls | NIS2 Directive; Cyber Resilience Act; ETSI standards |
| 3 | Zero trust and access control aligned with EU security measures | ENISA guidance |
| 4 | Endpoint and identity security in EU compliance-driven environments | ENISA guidance; ETSI standards |
| 5 📍 | Network segmentation and micro-segmentation for EU cyber resilience | ENISA guidance |
| 6 | Cryptography and key management under EU and ETSI standards | ETSI standards |
| 7 | Vulnerability management, remediation, and technical evidence | ENISA guidance |
| 8 | Penetration testing and security review for EU compliance | ENISA guidance |
| 9 | Incident detection, response, and reporting under EU obligations | NIS2 Directive; ENISA guidance |
| 10 | Cloud and digital infrastructure security in the EU | EU cloud certification (EUCS); ENISA guidance |
| 11 | Secure DevSecOps and product security under EU requirements | Cyber Resilience Act; ENISA guidance |
| 12 | Network resilience: high availability, redundancy, and fault tolerance | CER Directive; ENISA resilience guidance |
| 13 | Business continuity, backup, and recovery testing | NIS2 Directive; ENISA resilience guidance |
| 14 | EU critical-infrastructure resilience and integrated security-and-resilience case study | ENISA guidance; course materials |
| 15 | Course project presentations and technical review | Course materials; project rubric |
Course Schedule (All Sections)
Office Hours & Room
Assessment Methods and Criteria
Assessment Components
Final Exam
AI: Not AllowedAlignment with Learning Outcomes : 1 2 4 5
Assignments
AI: Not AllowedAlignment with Learning Outcomes : 1 4
Hands-on Labs
AI: Not AllowedAlignment with Learning Outcomes : 2 3 4
Course Project
AI: Not AllowedAlignment with Learning Outcomes : 2 4 5
IUS Grading System
| Grading Scale | IUS Grading System | IUS Coeff. | Letter (B&H) | Numerical (B&H) |
|---|---|---|---|---|
| 0 - 44 | F | 0 | F | 5 |
| 45 - 54 | E | 1 | ||
| 55 - 64 | C | 2 | E | 6 |
| 65 - 69 | C+ | 2.3 | D | 7 |
| 70 -74 | B- | 2.7 | ||
| 75 - 79 | B | 3 | C | 8 |
| 80 - 84 | B+ | 3.3 | ||
| 85 - 94 | A- | 3.7 | B | 9 |
| 95 - 100 | A | 4 | A | 10 |
Late Work Policy
Information about late submission policies will be shared during class and posted in this section. Please check back for official guidelines.
ECTS Credit Calculation
📚 Student Workload
This 6 ECTS credit course corresponds to 150 hours of total student workload, distributed as follows:
Lectures, EU case studies, and supervised discussions
45 hours ⏳ (15 week × 3 h)
Course project development and presentation
30 hours ⏳ (6 week × 5 h)
Practical sessions: hands-on labs and workshops
30 hours ⏳ (15 week × 2 h)
Final exam preparation and sitting
15 hours ⏳ (1 week × 15 h)
Independent study and EU document review
30 hours ⏳ (15 week × 2 h)
150 Total Workload Hours
6 ECTS Credits
Course Policies
Academic Integrity
All work submitted must be your own. Plagiarism, cheating, or any form of academic dishonesty will result in disciplinary action according to university policies. When in doubt about citation practices, consult the instructor.
Attendance Policy
Students are expected to adhere to the attendance requirements as outlined in the International University of Sarajevo Study Rules and Regulations. Excessive absences, whether excused or unexcused, may impact academic performance and eligibility for assessment. Mandatory sessions (e.g., labs, workshops) require attendance unless formally exempted. For detailed policies on absences, documentation, and penalties, please refer to the official university regulations.
Technology & AI Policy
Laptops/tablets may be used for note-taking only during lectures. Phones should be silenced and put away during all class sessions. Audio/video recording requires prior permission from the instructor.
Artificial Intelligence (AI) Usage: The use of AI tools (e.g., ChatGPT, Copilot, Gemini) varies by assessment component. Please refer to the AI usage indicator next to each assessment item in the Assessment Methods and Criteria section above. Submitting AI-generated content as your own work, where AI is not explicitly allowed, constitutes an academic integrity violation.
Communication Policy
All course-related communication should occur through official university channels (institutional email or SIS). Emails should include [CS440] in the subject line.
Academic Quality Assurance Policy
Course Academic Quality Assurance is achieved through Semester Student Survey. At the end of each academic year, the institution of higher education is obliged to evaluate work of the academic staff, or the success of realization of the curricula.
Learning Tips
Be prepared to contribute thoughtfully during class discussions, labs, or collaborative work. Active participation deepens understanding and encourages critical thinking.
Complete assigned readings or prep materials before class. Take notes, highlight key ideas, and jot down questions. Aim to grasp core concepts and their applications—not just facts.
Use course frameworks or methodologies to analyze problems, case studies, or projects. Begin early to allow time for reflection and refinement. Seek feedback to improve your work.
Don’t hesitate to reach out when something is unclear. Use office hours, discussion boards, or peer networks to clarify concepts and stay on track.
Syllabus Last Updated on Sep 09, 2026 | International University of Sarajevo
Print Syllabus
Referencing Curricula Print this page
| Course Code | Course Title | Weekly Hours* | ECTS | Weekly Class Schedule | ||||||
| T | P | |||||||||
| CS440 | EU Network Security and Resilience | 3 | 2 | 6 | ||||||
| Prerequisite | Senior Standing | It is a prerequisite to | - | |||||||
| Lecturer | Amal Mersni | Office Hours / Room / Phone |
A F1.6
|
|||||||
| amersni@ius.edu.ba | ||||||||||
| Assistant | Assistant E-mail | |||||||||
| Course Objectives | EU Network Security and Resilience provides a technical perspective on network security and resilience in line with European cybersecurity best practices. The course connects practical network-security work with key EU cybersecurity and resilience frameworks, including NIS2, the Cyber Resilience Act, the Critical Entities Resilience Directive, ETSI standards, and ENISA guidance. Students learn how EU cybersecurity requirements influence technical controls, monitoring, vulnerability management, incident response, continuity planning, cloud security, and critical-infrastructure resilience. |
|||||||||
| Textbook | No required textbook. Core readings are official EU legislation, ENISA publications, and ETSI standards. Recommended supplementary textbook: Tjoa, S., Gafić, M., & Kieseberg, P. (2024). Cyber resilience fundamentals. Springer. | |||||||||
| Additional Literature |
|
|||||||||
| Learning Outcomes | After successful completion of the course, the student will be able to: | |||||||||
|
||||||||||
| Teaching Methods | Lectures, EU case studies, hands-on labs, workshops, and course project. | |||||||||
| Teaching Method Delivery | Face-to-face | Teaching Method Delivery Notes | ||||||||
| WEEK | TOPIC | REFERENCE | ||||||||
| Week 1 | EU network security and resilience: regulatory landscape and technical responsibilities | EU cybersecurity frameworks (NIS2, CRA, CER); ENISA guidance | ||||||||
| Week 2 | Translating EU cybersecurity requirements into technical controls | NIS2 Directive; Cyber Resilience Act; ETSI standards | ||||||||
| Week 3 | Zero trust and access control aligned with EU security measures | ENISA guidance | ||||||||
| Week 4 | Endpoint and identity security in EU compliance-driven environments | ENISA guidance; ETSI standards | ||||||||
| Week 5 | Network segmentation and micro-segmentation for EU cyber resilience | ENISA guidance | ||||||||
| Week 6 | Cryptography and key management under EU and ETSI standards | ETSI standards | ||||||||
| Week 7 | Vulnerability management, remediation, and technical evidence | ENISA guidance | ||||||||
| Week 8 | Penetration testing and security review for EU compliance | ENISA guidance | ||||||||
| Week 9 | Incident detection, response, and reporting under EU obligations | NIS2 Directive; ENISA guidance | ||||||||
| Week 10 | Cloud and digital infrastructure security in the EU | EU cloud certification (EUCS); ENISA guidance | ||||||||
| Week 11 | Secure DevSecOps and product security under EU requirements | Cyber Resilience Act; ENISA guidance | ||||||||
| Week 12 | Network resilience: high availability, redundancy, and fault tolerance | CER Directive; ENISA resilience guidance | ||||||||
| Week 13 | Business continuity, backup, and recovery testing | NIS2 Directive; ENISA resilience guidance | ||||||||
| Week 14 | EU critical-infrastructure resilience and integrated security-and-resilience case study | ENISA guidance; course materials | ||||||||
| Week 15 | Course project presentations and technical review | Course materials; project rubric | ||||||||
| Assessment Methods and Criteria | Evaluation Tool | Quantity | Weight | Alignment with LOs | AI Usage |
| Final Exam | 1 | 30 | 1,2,4,5 | Not Allowed | |
| Semester Evaluation Components | |||||
| Assignments | 3 | 20 | 1,4 | Not Allowed | |
| Hands-on Labs | 5 | 25 | 2,3,4 | Not Allowed | |
| Course Project | 1 | 25 | 2,4,5 | Not Allowed | |
| *** ECTS Credit Calculation *** | |||||
| Activity | Hours | Weeks | Student Workload Hours | Activity | Hours | Weeks | Student Workload Hours | |||
| Lectures, EU case studies, and supervised discussions | 3 | 15 | 45 | Course project development and presentation | 5 | 6 | 30 | |||
| Practical sessions: hands-on labs and workshops | 2 | 15 | 30 | Final exam preparation and sitting | 15 | 1 | 15 | |||
| Independent study and EU document review | 2 | 15 | 30 | |||||||
| Total Workload Hours = | 150 | |||||||||
| *T= Teaching, P= Practice | ECTS Credit = | 6 | ||||||||
| Course Academic Quality Assurance: Semester Student Survey | Last Update Date: 28/09/2026 | |||||||||