Risk Management and Compliance for Information Security

Catalog description

This course will use a holistic approach to examine the management of information security risk in relation to the strategic goals of the business organization. Students taking this course will learn to identify threats, threat agents, potential exploits and the information assets which will be impacted by those exploits. The risk management process will specifically examine threat agents, and the amplifiers, catalysts, and inhibitors to those threats. Using a process which assigns a weight to various threats, and a comprehensive risk analysis model will be developed.