INSS 778 - Information Security Risk Management

3 Credits

Prerequisite(s): INSS 735 This course addresses the perspective of information security as a risk to be managed. The risks, costs, and other issues involved in planning for business continuity and developing secure operations in information systems and networks are studied. Topics covered include disaster recovery, outsourcing issues, service level agreements, contingency and business continuity planning, qualitative/quantitative risk analysis, audit procedures, financial integrity, cost/benefit analyses, back-up and recovery provisions, as well as insurance protection, information security risk management standards, and security awareness programs. Relevant organizational procedures and public policies are also explored. Students will undertake a research project in information security risk management.