ITM631 Enterprise Security for Managers (3 cr.)

This course is a comprehensive overview of information security and the technology that supports it. Topics include the legal issues related to enterprise security, policy development, and the return on investment expected from security services in relation to the overall corporate risk assessment process.

Upon completion of this course, students are expected to be able to do the following:

1. Apply basic information security principles and approaches.
2. Analyze the major enterprise security threats and corresponding countermeasures.
3. Employ risk management and return on investment analysis as it relates to enterprise security.
4. Formulate and implement a plan for incident response.
5. Compare the frameworks commonly used for governance and compliance activities.
6. Compare and contrast the ethical arguments regarding information access.