Find out how you can help organizations protect their data and technological assets. You will learn best practices for cyber security, access control, configuration management, and more. This course is part of the Bachelor of Science in Information Technology program at the Forbes School of Business & Technology.
In this course, students will learn how to manage the technology that affects organizations. Concepts covered include security best practices, access control, network components and services, change management, and configuration management. Students will gain an understanding of how the services offered by the various network components should be managed and protected. Prerequisite: INT 301.
This course introduces students to the principles of information systems security (confidentiality, integrity, and availability) and the seven domains of the typical IT infrastructure. Risks, threats, and vulnerabilities will be defined. Creation of an IT security policy framework will be emphasized. The following topics will be introduced: the risk management process, cryptography, compliance laws, and information security standards. At the end of the course, students will be able to apply the security life cycle to an information system.
This course introduces the risks associated with connecting to the Internet via web applications and social networking. Students will learn the Open Web Application Security Project (OWASP) Top 10 threats to web applications and the threat classifications of the Web Application Security Consortium (WASC). Instruction on how to maintain PCI-DSS compliance in e-commerce sites will be provided. At the end of the course, students will be able to secure web applications and mitigate vulnerabilities with web applications on the Linux and Windows platforms.
This course expands upon the cryptography concepts learned in CYB 301 Introduction to Cyber & Data Security Technology. A history of cryptography will be presented. Topics include symmetric encryption algorithms, asymmetric encryption algorithms, and hashing functions. The protocols, tools, and techniques used in cryptography will be reviewed. Hacking techniques that use cryptography will be introduced. At the end of the course, students will be able to design a cryptography plan to safeguard information that is electronically transmitted.
This course builds upon the risk management concepts learned in CYB 301 Introduction to Cyber & Data Security Technology. Topics presented are risk management standards, methods, and tools and IT governance and control frameworks. Methods to prepare a risk analysis will be reviewed. Upon completion of the course, students will be able to identify an organization’s threats and vulnerabilities, and the associated risks along with the probability that the risks will occur.
This course builds upon the compliance concepts learned in CYB 301 Introduction to Cyber & Data Security Technology. Students will examine laws and/or regulations that may apply to an organization. The various types of evidence and how to protect the evidence via the chain of custody will be emphasized. Upon completion of the course, the students will be able to perform a digital forensic investigation.
In the Cyber & Data Security Technology Capstone course, students will complete an original and significant project that integrates concepts, principles, and tools taught throughout the program. In this course, the student will design, implement, test, and document a secured solution of the seven domains of an organization’s IT infrastructure. A presentation will be made by the individual for evaluation and approval. Prerequisites: GEN 499. This course must be taken last in the program.
