INFORMATION SECURITY AND ASSURANCE

Course Description

Information security is the state of being free from danger while Information Assurance (IA) is act of managing risks and keeping information safe from harm. Both information security and information assurance encompasses computer security, communications security, operations security and physical security. The main objective of these course is to learn the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. The course will address hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT Security and Risk Management. Topics to be covered include Physical security, VPN, SSL, Cryptography, Digital Forensics, digital signature.

INFORMATION SECURITY AND ASSURANCE

Evaluation Tools (Active Term)

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Reference Books & Course Materials

1. 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
2. 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger

Learning Outcomes

1. L01 To Identify and examine the foundational theory behind information security SOLO 3.5
2. L02 To identify and assess the common threats faced by organizations SOLO 3.5
3. L03 To design and develop the basic principle and technique to mitigate security issues SOLO 5
4. L04 To examine the basic security principles and techniques when designing a system SOLO 3
5. L05 To demonstrate how today's attacks and defenses work in practice SOLO 4
6. L06 To evaluate the key concepts of information security and how they work SOLO 5
7. L07 Apply the principles of cryptography, including encryption and hashing techniques, to protect digital information SOLO 4
8. L08 Evaluate secure communication protocols, including Firewall, VPN and SSL, and demonstrate how they ensure data integrity and confidentiality SOLO 4.5
9. L09 Analyze security models and frameworks to plan and develop effective information security strategies. SOLO 4.7
10. L10 Examine the fundamentals of digital forensics and its role in identifying and resolving security breaches. SOLO 3

Program Outcomes

1. P01 Create a user interface in a contemporary object-oriented language to allow users to access business data
2. P02 Identify and analyze user needs and take them into account in the selection, creation, integration, evaluation and administration of computing-based systems
3. P03 Analyze common business functions and identify, design, and develop appropriate information technology solutions
4. P04 Design and develop software solutions for contemporary business environments by employing appropriate problem-solving strategies
5. P05 Configure and administer database server to support contemporary business environments.
6. P06 Administer or mange a relational database for a small to medium size company
7. P07 Be able to effectively integrate IT-based solutions into the user environment
8. P08 Understand professional, ethical, legal, security and social issues and responsibilities
9. P09 Be able to apply effective communication skills consistent with the professional environment
10. P10 Be able to apply effective collaboration skills in teamwork consistent with the professional environment

Po-Lo Matrix