Information Security Governance, Risk, Compliance and Audit. 3 credits

Catalog description

The field of information security management heavily focuses on governance, risk, and compliance (GRC), as well as auditing the GRC and security posture of organizations. The course introduces these four areas of information security management to students so that they understand the concepts, process, and importance of each area. The course will also focus on application of GRC and audit principles to organizations’ security practices. In a term project, students will assess the information security posture of an enterprise along available control frameworks, control objectives, logging, monitoring, reporting, and change management actions of the enterprise, and develop remediation procedures. Offered by Costello College of Business . May not be repeated for credit.