Risk Analysis, Policy and Regulatory Compliance.

Catalog description

This course examines principles and practices of risk analysis, cybersecurity policy, and regulatory compliance within organizational and governmental contexts. Students analyze threats and vulnerabilities to information assets and apply qualitative and quantitative risk assessment methodologies to support decision-making. The course explores the development, implementation, and evaluation of security policies, standards, and governance frameworks, with emphasis on legal, ethical, and regulatory requirements affecting information systems. Students gain experience in interpreting and applying major cybersecurity laws, regulations, and compliance frameworks, and learn to align security controls with organizational strategy and risk tolerance.