Nova Southeastern University

Graduate Certificate in Information Security Management

Introduction
Curriculum
Course Descriptions

The Graduate Certificate in Information Security Management requires a total of 15 credit-hours (five courses). The concentration and graduate certificate are recognized by the National Security Agency (NSA) based on its certification of the school’s curriculum under NSA national training standards NSTISSI No. 4011 (Information Systems Security Professionals) and CNSSI No. 4013 (System Administrators). As a result of this certification, Federal civilian and military personnel will be permitted to take the school’s certified graduate courses under government sponsorship, and the school is authorized to issue certificates to students who complete such courses. Individuals may apply to take one or more certified information security courses as non-degree students.

Program Formats

Students select a preferred format (online or on-campus) in their admission applications, but once admitted may take courses in either format. Students electing the online format may participate in online classes from anywhere in the world where Internet access is available. On-campus classes are held on the main campus in Fort Lauderdale. Each class meets once a week from 6:00 p.m. to 8:00 p.m. for 16 weeks in the fall and winter terms and 14 weeks in the summer term.

GSCIS students are provided NSU computer accounts but must obtain their own Internet service providers and use their own computer systems. Online students use the web to access course materials, announcements, email, distance library services, subscription library databases, and other information, and for interaction with faculty and fellow students. Online, interactive learning methods are based on the use of Blackboard as a course management system. Online activities facilitate frequent student-to-faculty and student-to-student interaction. They are supported by threaded discussion boards, white boards, chat rooms, email, and multimedia presentations.

Attendance Policy

Students are expected to be present at each meeting of their classes on campus. Exceptions to this rule may be made in the case of illness and possibly in other instances when approved by the course professor. Students should advise their course professors in advance of any anticipated absences. Additional work may be required by a course professor for any absence. Excessive absences will result in a failing grade. For online courses, participation/attendance policies will be covered in the syllabus of each course.

Students must take the five courses listed below. Each of these courses has prerequisite requirements which may be satisfied by taking the prerequisite courses listed in the course descriptions or by demonstrating equivalent experience or the completion of equivalent courses taken elsewhere.

MMIS 683   Fundamentals of Security Technologies
MMIS 684   Information Security Management
MMIS 685   Information Security Governance
MMIS 686   Information System Auditing
MMIS 687   Information Security Project

Course Descriptions

MMIS 683  Fundamentals of Security Technologies  (3 credits)
An overview of the technical aspects of information security. Issues discussed include authentication, confidentiality, access control, trust and non-repudiation. Investigation of fundamental assurance technologies that can be applied to interface specifications, architectures, and implementations of information security mechanisms. The selection of appropriate security applications, security lifecycles, and interoperability issues will also be covered. Prerequisite: MMIS 653.

MMIS 684  Information Security Management  (3 credits)
Provides an understanding to implement effectively the information security vision and strategy set forth by the executive management. The emphasis will be on the management of an information security program. Focus is on the implementation of information security policy, information security planning, development of information security processes, and establishment of information security measures. Concepts and techniques from the management and organizational behavior disciplines will be integrated in order to identify and propose solutions to the problems of information security administration.

MMIS 685  Information Security Governance  (3 credits)
Challenges and opportunities of effectively governing an organization’s information security requirements and resources. Information security governance lays out the vision for the information security program. Discussions include what constitutes good information security governance, and development of an effective information security strategy and policy. Also focuses on how to improve information security accountability, regulatory compliance, and maturity. Prerequisite: MMIS 684.

MMIS 686  Information Systems Auditing (3 credits)
Fundamental concepts related to an information systems audit. Principles and practices related to secure operation of existing information technology. Information security accountability, development of internal control objectives and framework, and identification of appropriate audit procedures for a secure information system. Prerequisites: MMIS 683, 684.

MMIS 687  Information Security Project  (3 credits)
This project course integrates all of the knowledge accumulated through the previous courses and serves as a capstone for the Concentration in Information Security. The class focuses on best practices demonstrated through case studies and systems assessment. Students may enroll in this class only after completing all of the information security concentration courses. Prerequisites: MMIS 683, 684, 685, and 686.