Course Description :
Introduction to information security, Inspection, Resource inventory, Threat assessment, Identifying vulnerabilities, Assigning safeguards, Protection, Awareness, Access, Identification, Authentication, Authorization, Availability, Accuracy, Confidentiality, Accountability, Administration, Detection, Intruder types, Intrusion methods, Intrusion process, Detection methods, Monitoring systems, Reaction, Incident determination, Incident notification, Incident containment, Assessing damage, Incident recovery, Automated response, Reflection, Incident documentation, Incident evaluation, Legal prosecution, Risk assessment frameworks, COSO Integrated Control Framework, CoBiT – ISACA, ISO Risk Management – Draft Standard, Security engineering, Protocols, Passwords, Access controls, Cryptography, Physical aspects, Biometrics, Physical tamper resistance, Security printing and seals, Security in connected systems and networks, Distributed systems, Telecom system security, Network attack and defense, Protecting e-commerce systems, Policy and management issues, Copyright and privacy protection, E-policy. IT Security and Risk Management Lab provides practical implementation and extermination of the course material given in the lectures of CNC 419, and lab projects.