CSEC 477: Governance Policies in Information Assurance

This course focuses on assessment of business risks arising from information security and privacy issues, as well as the creation and implementation of policies that ensure compliance with laws and industry standards. It is a complement to IS 482, which focuses on the legal standards to which people and organizations are held under laws and regulations that concern computing and information technology. Legal issues arising under information security and control frameworks, such as COBIT and IS017799, are considered. Topics include privacy laws, payment card industry standards, information security measures mandated by select federal statues (e.g., HIPAA, Gramm-Leach-Bliley and Sarbanes-Oxley), data breach notification, governance and policy development, e-discovery, contracts, intellectual property, and security risk assessments.