Information Security Management

Catalog description

This course covers the domains of human security and organizational security. The course will begin with discussing topics related to protecting an individual’s data and privacy and personal life in the context of organizations. Following the concepts of human security, the course will discuss potential cyber risks and threats targeting at organizations, and strategies and methods to protect organizations from cybersecurity threats, while managing risk to support the organization’s mission. In terms of organizational security, this course will first introduce methods to identify information assets, prioritize threats to information assets, and define an information security strategy and architecture. The course will then introduce methods and practices to develop system specific plans to protect against various threats. Most importantly, students will learn about the legal and public relations implications of security and privacy issues. Finally, the course will present a disaster recovery plan for recovery of information assets after cybersecurity incidents.