Principles Of Information Security 2024

Information Security

What you'll learn

Summarize and demonstrate an understanding and working knowledge of cybersecurity management terms and phraseology

Acquire and differentiate a broad understanding of the cybersecurity environment, computer, information and communication system operating principles

Classify and differentiate a basic working knowledge of cybersecurity awareness and threats.

Describe the roles, responsibilities, and tools of a cybersecurity manager

Requirements

None but it is generally expected that students have a basic understanding of computer systems and networks.

Description

The student will be able to:Classify and differentiate a basic working knowledge of cybersecurity awareness and threats.Describe the roles, responsibilities, and tools of a cybersecurity manager.Inventory and analyze the basic knowledge of critical infrastructures and potential threats and impacts.Summarize and discuss an understanding of the basics of the Comprehensive National CybersecurityInitiative (CNCI).Explain the evolving environment of cybersecurity international law, national law enforcement, and organizational security measures and counter measures.Classify future trends in cybersecurity issues facing public and private enterprises.The principles of information security focuses on three core components: confidentiality, integrity, and availability, commonly referred to as the CIA triad.Confidentiality ensures that sensitive information is accessed only by authorized individuals. This involves implementing measures such as encryption, access controls, and secure communication methods to protect data from unauthorized disclosure.Integrity refers to maintaining the accuracy and trustworthiness of data throughout its lifecycle. This includes protecting data from unauthorized modification, ensuring that information is complete and accurate, and validating that data remains reliable and authentic.Availability guarantees that information and resources are accessible to authorized users whenever needed. This involves implementing robust systems and protocols that ensure minimal downtime and prompt recovery from incidents that could disrupt access to data, such as cyberattacks or hardware failures.Together, these principles form the foundation of an effective information security strategy, addressing the diverse threats that information assets face.

Overview

Section 1: Course Overview

Lecture 1 Course Orientation

Section 2: Principles of Information Security

Lecture 2 Introduction to Information Security

Lecture 3 The Need for Security

Lecture 4 Legal, Ethical, and Professional Issues in Information Security

Lecture 5 Planning for Security

Lecture 6 Risk Management

Lecture 7 Security Technology: Access Controls, Firewalls and VPNs

Lecture 8 Security Technology: Intrusion Detection & Prevention Systems, and Other Tools

Lecture 9 Cryptography

Lecture 10 Physical Security

Lecture 11 Implementing Information Security

Lecture 12 Security and Personnel

Lecture 13 Information Security Maintenance

The intended audience for an introduction to information security includes those new to the field, such as individuals seeking to understand the principles and tenets necessary for protecting information. This audience can range from entry-level professionals to senior-level individuals like security managers who may require a foundational understanding of information security concepts. It's important to tailor the content to meet the varying needs of these audiences.