This course exposes to the students the fundamentals of information security and assurance in modern organization. Student also will be introduced to the principles and planning techniques and development of managerial strategy for information security and assurance. It can be noted that information security in modern organization is management problem and not only the solution in the context of technology. In the planning and information security development aspects, students will be exposed to the planning for information security, planning for contingency, information security policy, the development of security programs.
In addition, models and practices of security management also will be explained. For the information security risk management, students will be exposed to the identification, evaluation, and information security risk management control. Student will be also exposed to the information security protection mechanism that is currently used. Student will be explained on information on human resources, the need of SETA (security education, training, and awareness), also the legal and ethics related to the information security management.