The goal of this course is to introduce students to the nomenclature, concepts, and applied techniques of Information Systems (IS) security. The course will introduce students to the body of knowledge needed to earn the Certified Information Systems Security Professional (CISSP) credential. The course will give students insight into the psychology of hackers and hacking, and cover the basics of applied cryptography along with the different types of host and network attacks, how they are done, what firms can do when attacks occur, and how consumers and firms can prevent future attacks. We will look at access control and site security, review networking concepts as they pertain to security issues, look in depth at attack methods, examine the elements of applied cryptography, functionality of firewalls, host security, and discuss methods of handling incident and disaster response. Finally, the course will examine how best to manage and govern the IS security function in an organization.
Prerequisite(s): BMIS 2588 Database Management