The management of computer incident responses and Information Systems services are studied. The organization of computer operations, the separation of duties, control at interfaces and media, backup procedures, console capabilities, the control of personnel, and documentation are taught. Emphasis is placed upon evidence and its admissibility at company discipline hearings and in court. Federal statutes including copyright, privacy legislation, intellectual property laws, control of strategic goods, applicable US laws and regulations, and trans-border data flows are examined. In addition, students develop an understanding of ethics and its relationship to society, the laws, and professions.
Students acquire an understanding of how ethics have influenced the laws and professions.
As well, students use ethical decision making methodologies. The objectives of telecommunications security, hazards, and exposures as well as the security effects of topology, media, protocols, and switching are examined. Organizing company structures, personnel and tasks to manage effectively a company wide security program is explored. This course provides a broad review of the basic elements of computer security, common threats, planning in a system life cycle, operational controls, logical access control, and assessing and mitigating risks to a computer system. The relationship of resource allocation, competing objectives, and organization strategy to protecting both technical and information resources through policy are explored.