14-784 Information Security Risk Management II
6 units, Carnegie Mellon University
This course approaches information security as a risk management problem where the organization has to identify information security risks, decide how to resolve these risks, and make tradeoff, economic, and investment decisions about controls, practices, and solutions to mitigate risk. Students will learn a standard risk management process for identifying, analyzing, and responding to risk, as well as the analytical tools for calculating the costs and benefits of investment security decisions. Students will perform a case study using the OCTAVE risk assessment method developed by the CERT program at the Software Engineering Institute. Additional topics covered include an introduction of how to use classical financial analysis techniques to evaluate information security security investments. This course uses a Harvard Business School case study. Students will be charged a fee for the course materials. The fee for these materials will be charged to the students account. Learning Objectives Upon completion of this course students will understand Basic understanding of the information security risk management process and how to identify, analyze, and respond to risk. Key economic concepts in uncertainty decision making and financial analysis. How to calculate ROI on a security investment.
Prerequisites: 14-782 or 95-755
Courseweave needs JavaScript to show sections, workloads and planning tools.