COMN-228 Management of Information Security

Credits 3 / 3 Contact Hours
Prerequisite: Placement into RDNG-016 (ACSR-016) Prerequisite: COMN-181
This is an advanced level computer security course emphasizing the managerial aspects to computer security. Topics covered include contingency planning information security policy the identification and assessment of risk laws and ethics of information security and how to maintain information security during the development process.

Course Outcomes
1. Outline the NSTISSC security model 2. Identify the principles of information security management 3. Create a strategic plan 4. Explain the components of contingency planning 5. Create a disaster recovery plan 6. Develop an information security policy 7. Explain how to implement information security within an organization 8. Identify security roles and titles that should be located within an organization 9. Implement security education, training, and awareness programs within an organization 10. Identify security management models 11. Identify risks within an organization 12. Identify possible controls to handle risks 13. Develop a feasibility study and cost benefit analysis for information security 14. Identify intrusion detection system 15. Explain cryptographic controls 16. Outline the responsibilities for information security personnel 17. Explain the ethical concepts within information security 18. Explain how to incorporate project management within information security 19. Describe the different project management tools