Master's in Information Technology - Security Management Online

This course introduces the overall foundations required for the understanding of, and further study in, information systems security. It reviews the history of security and computer systems security in particular to develop a set of models to guide the approach to realizing computer systems security. An overview of current security technologies is presented. A research project and formal paper are required.

As enterprise systems become even more complex with the introduction of new technologies rapidly increasing, having a well thought out architecture tying to the four domains of enterprise architecture is even more crucial to the survival of an enterprise. The four domains encompass the business operating model, information architecture, application software, and the overall technology infrastructure. The Enterprise Systems Architecture course explores current approaches to an enterprise level design of systems architectures within these four domains. Emphasis is placed on high-level design issues and opportunities for long-term systems planning.

This course introduces the fundamental Enterprise Data Management concepts of enterprise content management (ECM) and data governance. ECM techniques for building, managing, and maintaining an organization’s information infrastructure is studied. Data governance topics include development of policies and procedures to ensure the availability, usability, integrity, and security of data resources and the implementation and management of those policies.

Networks are vitally important to today's organizations. Networking technologies continuously change and network professionals must integrate those changes without disrupting existing network traffic. Students will examine current networking architectures and explore networking applications, and protocols to assess their impact on a business organization. The course covers the basic concepts of data communications and design. This includes discussions on network operating systems as well as transmission media, communications hardware, network topologies, switching methods and network analysis. Students will research emerging technologies such as wireless networking, multi-media networking, virtual private networks, cloud computing and IPSec security.

Students will master analytical and integrative tools to perform in-depth analyses of industries, firms, and competitors. Course material includes methods to predict competitive behavior and develop and implement strategic plans to achieve and sustain a competitive profile in the emerging global marketplace.

This course is an introduction to the foundational discipline of effective project management in any industry. It examines the methods, approaches, processes, skills, tools and techniques, and value delivery system that project managers use to complete their projects on schedule, within budget, within scope, within quality, and customer acceptance. Students will explore and apply elements of the theoretical and operational framework of project management.

This course covers aspects of security that apply to creation, deployment, and maintenance of applications and data bases, including the practical and regulatory concerns of information assurance. Included also are the security concerns in this domain as pertains to cloud computing and virtualization. The system vulnerabilities of poor programming practice are examined and suggestions for mitigation developed.

Operating Systems Security provides an in-depth analysis of the security components at the operating system level. The focus is on the development of a security policy and the basic elements that provide identification and authentication, access control and security auditing. In addition to general concepts, both the UNIX/Linux and Windows operating systems are studied. Students participate in hands-on lab assignments to reinforce the material as well as to gain familiarity with a number of available operating system security products and tools (both freeware and commercially available).

Students are provided with a brief overview of the basic elements of networking concepts, topologies, protocols and threats necessary to understand network security issues and make security relevant decisions. An in-depth analysis of the Open Systems Interconnection (OSI) model and layered network security mechanisms needed to provide Confidentiality, Integrity, Availability, Authorization, Authentication and Non-repudiation within a network environment is included. This course includes a thorough treatment of cryptography and cryptographic services. An implementation plan and formal paper are required.

This course covers a variety of issues relating to the management of information systems security. The topics covered include development of policies, standards and procedures, risk analysis methodologies, contingency planning and disaster recovery. Additional topics covered include legal and ethical issues, incident reporting, security auditing, computer crime, and security awareness and training. Implementation issues, potential conflicts and tradeoffs are also discussed. A project is required.

This course introduces students to the audit services in accordance with IT audit standards. This course develops the skills needed to evaluate risk-based IT audit strategies; develop specific audits plan, report the finding, and develop status reports in order to assist the enterprise with protecting and controlling information systems.

The Information Technology Capstone demonstrates mastery and vital knowledge from the prior course of study completed by the student. The content, concepts, and knowledge from the applicable programs are critically applied by completing an in-depth project utilizing project management techniques and focusing on a major technical problem or major issue that impacts the student’s own organization or in a desired area of study. The course requires the student to perform a comprehensive analysis and study in a selected area of interest. The student will prepare a formal technical report of the detailed research and application of prior course