Evan Anderson
IS4550
Security Policies and Implementation
Welcome!
Welcome to the onsite Summer Quarter 2016 session of IS4550 at the Everett, Washington campus of ITT Technical Institute.
Course Description
This course explores security policies that protect and maintain an organization’s network and information systems assets. Topics include the effects of organizational culture, behavior and communications styles on generating, enforcing and maintaining security policies.
Major Instructional Areas
- Security policy requirements
- Security policy framework
- Creation of security policies
- Implementation issues
- Security policy controls
Course Objectives
- Identify the role of an information systems security (ISS) policy framework in overcoming business challenges.
- Analyze how security policies help mitigate risks and support business processes in various domains in the information technology (IT) infrastructure.
- Describe the components and basic requirements for creating a security policy framework.
- Describe the different methods, roles, responsibilities, and accountabilities of personnel, along with the governance and compliance of security policy framework.
- Describe the different ISS policies associated with the user domain.
- Describe the different ISS policies associated with the IT infrastructure.
- Describe the different ISS policies associated with risk management.
- Describe the different ISS policies associated with incident response teams (IRT).
- Describe different issues related to implementing and enforcing ISS policies.
- Describe the different issues related to defining, tracking, monitoring, reporting, automating, and configuration of compliance systems and emerging technologies.