INFORMATION SECURITY AND ASSURANCE

Course Description

Information security is the state of being free from danger while Information Assurance (IA) is acting of managing risks and keeping information safe from harm. Both information security and information assurance encompasses computer security, communication security, operations security and physical security. The main objective of this course is to learn the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. The course will address hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT Security and Risk Management. Topics to be covered include Physical security, VPN, SSL, Cryptography, Digital Forensics, digital signature.

INFORMATION SECURITY AND ASSURANCE

Evaluation Tools (Active Term)

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Reference Books & Course Materials

1. 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
2. 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger

Learning Outcomes

1. L01 To Identify and examine the foundational theory behind information security SOLO 3.5
2. L02 To identify and assess the common threats faced by organizations SOLO 3.5
3. L03 To design and develop the basic principle and technique to mitigate security issues SOLO 5
4. L04 To examine the basic security principles and techniques when designing a system SOLO 3
5. L05 To demonstrate how today's attacks and defenses work in practice SOLO 4
6. L06 To evaluate the key concepts of information security and how they work SOLO 5
7. L07 Apply the principles of cryptography, including encryption and hashing techniques, to protect digital information SOLO 4
8. L08 Evaluate secure communication protocols, including Firewall, VPN and SSL, and demonstrate how they ensure data integrity and confidentiality SOLO 4.5
9. L09 Analyze security models and frameworks to plan and develop effective information security strategies. SOLO 4.7
10. L10 Examine the fundamentals of digital forensics and its role in identifying and resolving security breaches SOLO 3

Program Outcomes

1. P01 Demonstrate comprehensive knowledge of key concepts across the breadth of effective application and use of MIS and innovative information technologies in organizations.
2. P02 Demonstrate autonomy and responsibility in managing MIS projects and improving organizational processes
3. P03 Demonstrate comprehensive understanding of appropriate enterprise frameworks, theories from the MIS to research and assess contemporary issues in the field and related allied fields and disciplines
4. P04 Apply MIS knowledge to facilitate the acquisition, development, deployment, and management of information systems
5. P05 Apply MIS knowledge to the exploitation of opportunities created by information technology innovations ensuring the alignment between MIS strategy and organizational strategy
6. P06 Demonstrate ethical reasoning in relation to crucial MIS issues such as privacy, information security, and ethical use of information
7. P07 Apply appropriate technologies and techniques to the collection and analysis of organizational and environmental data to facilitate evidence-based decision-making
8. P08 Analyse organizational data to accurately identify organizational problems and propose solutions using MIS
9. P09 Apply effective communication skills consistent with the professional environment
10. P10 Apply effective collaboration skills consistent with the professional environment

Po-Lo Matrix