In this course students learn the importance of managing the information assets of the organization including logical, physical and environmental security. Disaster recovery and business continuity controls are also discussed.

Provides a broad and foundational understanding of how systems and infrastructure projects are planned, developed, and implemented. Topics covered include feasibility study and business case development, requirements, architecture and design, development, acquisition, implementation, post-implementation, agile and traditional methodologies, organizational maturity and processes. Associated controls during systems development and acquisition is also discussed.

Examines the controls needed to assure that an IT organization deliver on its value proposition at a minimal risk. Learn about the challenges of providing a reliable and secure service to the business. Topics include SLA’s, monitoring, change control, incident management, etc.

Examines how ERP systems are used in corporations to execute standard business processes and to collect accounting data. Emphasis is on how such systems are controlled. Class examples and exercises use SAP.

Examines the emerging approach of continuous-audit. This approach relies heavily on data analytics to examine datasets produced by audit and security controls (for instance, network log files).  Basic data analysis concepts are presented and then applied to security or audit problems. Audit specific tools like ACL will be used in addition to general tools like Excel.

Examines the methodology by which an organization aligns its business strategy with its security operations. Both the current and desired future states of the business’ security efforts are described so that resources can be directed to the security efforts most needed to support the business.

This course introduces students to the essential concepts of IT auditing. Students will learn standards and guidelines for performing an IT audit. Topics will include concepts of internal controls. Students will learn to plan and manage an audit as well has how to report on evidence collected during the audit.

In this course students hone a variety of business skills that are necessary to be effective as an IT auditor. These skills include managerial communications and public speaking skills, interviewing skills, negotiation and personal selling skills, business writing, industrial psychology/behavioral science skills, project/time management and team building skills.

In this course students are given the opportunity to demonstrate the capabilities they have developed throughout the program. This course prepares students for the CISA examinations and requires them to demonstrate an ability to research emerging IT assurance issues.