ISM 6332: Information Security Risk Management (2022-2023)

View all ISM classes

Focuses on approaches to identifying vulnerabilities in an information infrastructure and assessing the risk imposed by such vulnerabilities. Specific technologies and techniques used by hackers, spies and thieves to obtain access to sensitive, private information are discussed and explored. Includes security auditing, mapping of networks, patch management, security configuration management, and the use of automated tools for identifying and characterizing vulnerabilities. Physical security is evaluated. Methodologies and technologies for penetration testing of systems and networks are explored. The use of social engineering as a method for gaining information concerning and access to information infrastructures is evaluated. Strategies are developed for mitigation of risks prior to occurrence of a security-compromising incident.