MANAGEMENT OF INFORMATION SECURITY AND FORENSICS

Transcription

1 MANAGEMENT OF INFORMATION SECURITY AND FORENSICS CS 307 Ctlog Dsription PREREQUISITE: CS 0. Stuy of informtion surity n igitl fornsis using prtil s stuis. Emphsis is on vloping surity poliis, surity mngmnt n prtis, utiliztion of igitl fornsi tools n thniqus, risk mngmnt, surity projt mngmnt, n prottion mhnisms. Mjor omponnts of th ours r hns-on projts on igitl fornsi invstigtion n surity mngmnt s stuis. Cours Ojtivs To vlop n unrstning of si informtion surity n fornsis trminologis n onpts. To unrstn th prtil rlitis of thrts to informtion surity n th mthos, tools, n thniqus us to mitigt thm. To l to intify th typs of ttks, thir unrlying ntur, n th prolms n solutions ssoit with thm. To l to unrstn risk mngmnt, its importn, n its vlopmnt. To unrstn th rlvn of informtion surity poliis, th mols, n th guilins for thir vlopmnt. To unrstn igitl fornsis n invstigtion n to l to prform n in-pth nlysis n to rport signifint finings. Cours Mtrils Txtook Softwr Titl: Mngmnt of Informtion Surity, n. Author: Whitmn n Mttor Pulishr: Cours Thnology Dt: 008 Powrpoint rr

2 PDF rr Intrnt Browsr (MS Intrnt Explorr or Mozill Firfox) Supplmntry Rsours Dtil Cours Outlin Topi I Introution to th Mngmnt of Informtion Surity Ltur NSTISSC Surity mol Prinipls of Informtion Surity Mngmnt INFOSEC n OPSEC II Plnning for Surity.5 Vlus, Vision, n Mission Sttmnts Strtgi Plnning III Plnning for Surity Implmnttion Plnning for Contingnis Contingny Plnning 0.75 Businss Impt Anlysis Inint Rspons Pln Disstr Rovry Pln Businss Continuity Pln IV Informtion Surity Poliy Poliy, Stnrs, n Prtis 4.5 Entrpris Poliy Issu Spifi Poliy Systm Spifi Poliy f g V Guilins for Efftiv Poliy Dvloping Surity Poliy Complin, Enformnt, Distriution, n Automt Tools Dvloping Surity Progrm.5

3 Topi Ltur Orgnizing for Surity VI VII Componnts of th Surity Progrm Informtion Surity Rols n Titls Implmnting Surity Eution, Trining, n Awrnss Progrms Surity Mngmnt Mols n Prtis Surity Mngmnt Mols Surity Mngmnt Prtis Mtris in Informtion Surity Mngmnt Emrging Trns in Crtifition n Arittion Crtifition n Arittion Risk Mngmnt: Intifying n Assssing Risk 4.5 Risk Mngmnt Risk Intifition Risk Assssmnt VIII Risk Mngmnt: Controlling Risk Risk Control Strtgis Mnging Risk Cost Bnfit Anlysis OCTAVE Mtho IX Prottion Mhnism 6 Ass Control Firwlls f Intrusion Dttion Systms Rmot Ass Prottion Wirlss Ntwork Prottion: WEP, WPA Snning n Anlysis tools g Cryptogrphy X Prsonnl n Surity Stffing n Surity Funtions Informtion Surity Profssionl Crntils: 3

4 Topi CISSP, CISA, CISM, GIAC, SCP, CCE, CIFI, SSCP Employmnt Poliis n Prtis Ltur Surity Custoin XI Lws n Ethis 3 Lgl Environmnt 0.5 Rlvnt US Lws.5 Intrntionl Lws n Lgl Bois Poliy vs Lw 0.5 Profssionl Orgniztions n thir Cos of Ethis f Orgniztionl Liility 0.5 XII Informtion Surity Projt Mngmnt Projt Mngmnt XIII Projt Mngmnt Tools Digitl Fornsis n Invstigtions Digitl Fornsi Prosss.5 Ars of Invstigtion 0.5 Mthos of Aquisition Fornsi Anlysis Fornsi Tools f Fornsi Rports 0.5 XIV Cs Stuy Rport Cours Poliy Exmintion Protoring Th JSU poliy for protoring of xmintion for n onlin ours is foun in th following link: Pls not tht, if stunt livs in th Jksonvill r or nry, th instrutor will mk rrngmnt for tht stunt to tk th xm on mpus. Othrwis, th stunt must sk somon to t s tsting gnt or protor. Th stunt is rsponsil for ny ost ssoit with xm protoring.

5 Gring Poliy Tst 5% Tst 5% Onlin isussion prtiiption Homworks/Cs Stuy 5% 5% Finl Exm 30% Gring sl (Prntg) A 90 - ov B C D F low 60 Othr Cours Poliis Any iniviul who qulifis for rsonl ommotions unr th Amrins With Disilitis At or Stion 504 of th Rhilittion At of 973 shoul ontt th Instrutor immitly. Cours Syllus Th syllus for this ours n ownlo hr in PDF formt. 008 Jksonvill Stt Univrsity