IS 413: Information Security Risk Management

Course Description

This course examines information security through the lens of risk management. Students will learn foundational concepts in risk management and valuation as well as common approaches for identifying, analyzing, monitoring, and responding to information security risk. Coverage will include common frameworks, such as NIST CSF and COBIT, as well as quantitative approaches to risk analysis, risk valuation, and risk metrics using the Factor Analysis of Information Risk (FAIR) model. Students will learn appropriate risk mitigation and acceptance strategies given the resource constraints of the organization. Prerequisites: (INFO SYS 311 with a C or better) AND EITHER (Admitted to the School of Business) OR (60 credits and 2.2 GPA). Special course fees may apply.