Compliance

Catalog description

Introduces the student to Information Systems Security Compliance. Covers security compliance assessment of security controls (physical, procedural, and technical), and methods to remediate security gaps discovered during the security assessment using Control Objectives for Information and related Technology (COBIT), and International Standards Organization/International Electro Technical Commission (ISO/IEC 27000) as the control frameworks. Discussions conducted on compliance areas include Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), Sarbanes-Oxley Act (SOX), Federal Information Security Management Act of 2002 (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), Family Educational Rights and Privacy Act (FERPA), Children’s Online Privacy Protection Act (COPPA), and Children’s Internet Protection Act (CIPA).