a novel scenario-based information security management exercise
In an environment of continually growing security threats, it is essential to raise the information security (INFOSEC) awareness and capabilities of ALL students entering the workforce. When considering INFOSEC education in the academic community, one often overlooked group is business students. However, the recognition and mitigation of information security risk is not only vital to the well being and survival of businesses, but also to our national security which is heavily dependant upon critical infrastructure industries located in the private sector. In this article, I discuss the experiences gained over a three year period in the development and implementation of a scenario-based, information security management exercise which is the capstone project in a graduate business information security course at Texas A&M University. The objective of the exercise is to give students hands on experience in the planning, analysis, design, implementation, and maintenance of an organization's information security program.
information security management enterprise security programs