CORE COURSES

SPECIALIZATION AND ELECTIVE COURSES

IA7020 Information Security Systems and Organizational Awareness
In this course, students utilize a subset of five of the ten domains of the (ISC)² Common Body of Knowledge (CBK) in information security as a framework to critically analyze security awareness issues and to evaluate best practices in implementing security systems within the enterprise. (3 credits)

IA7030 Legal and Ethical Practices in Information Security
In this course, students utilize a subset of five of the ten domains of the (ISC)² Common Body of Knowledge (CBK) in information security as a framework to critically analyze ethical decision-making and to evaluate the best practices employed in security operations planning and management. (3 credits)

IA7040 Information Security and Organizational Change
In this course, students analyze the principles of change management as they apply to the requirements and regulations of information security. Students evaluate the factors which affect corporate decision-making when implementing security programs and the ability of the manager to translate corporate needs into information security projects. (3 credits)

IA8010 Business and Security Risk Analysis
This course provides students with an overview of risk management principles. Methods to identify, quantify, and qualify internal and external risks to the organization are examined. Students apply these principles and methods to the current business and risk environment. (3 credits)

IA8250 Knowledge Management in Information Security
In this course, students utilize secondary research competencies to identify and evaluate industry-relevant sources of information in the context of an emerging technology trend in information security. (3 credits)

PM8100 Information Security Project Management
In this course, students utilize PMI's Project Management Body of Knowledge (PMBOK) as a framework to apply project management concepts in the information security arena. Each student develops a project plan for a security assessment which incorporates the technical and behavioral characteristics of high performance teams. (3 credits)

RM6000 Effective Writing in Information Security Analysis
In this course, students utilize secondary research to analyze a current best practice or process in one of the ten domains of Information Security. Students write and present a white paper providing a rationale for research to evaluate the effectiveness of that practice or process. (3 credits)

RM9200 Strategic Analysis in Information Security
In this integrative course, students assess the information security risk associated with an identified management problem. Students then develop a risk mitigation strategy which integrates principles and techniques of risk analysis, project planning, and change management. (3 credits)

Specialization Courses

IA8020 Security Policies, Standards and Procedures
In this course, students examine the role of security policies, standards and procedures in addressing business and technical risks and develop a security governance report to evaluate compliance across the enterprise. (3 credits)

IA8030 Design, Development and Evaluation of Security Controls
In this course, students transform high-level policies and procedures into quantifiable and measurable controls and mechanisms that enforce data and process integrity, availability and confidentiality. (3 credits)

IA8040 Incident Response Management
In this course, students identify and analyze the nature of security incidents, the source of potential threats and the methods used in incident management and mitigation. Students also evaluate technical and business issues which affect the actions of the enterprise in responding to a security incident. (3 credits)

IA8050 Security Risk and Vulnerability Assessment
This course provides students with an understanding of advanced techniques and tools for identifying and categorizing vulnerabilities that allow penetration of networked systems and environments. Students gain first-hand experience in the assessment of networked systems through extended virtual lab sessions. (3 credits)

IA8060 Intrusion Detection, Attacks and Countermeasures
In this course, students examine common attack methods, technologies and countermeasures. Students also gain skills needed to recognize various stages and methods of attack on the enterprise. (3 credits)

IA8070 Design and Development of Security Architectures
In this course, students evaluate the principles, attributes and processes used in designing and deploying a comprehensive and resilient layered security architecture that supports the business and technical objectives of the enterprise. (3 credits)

IA8080 Security Solution Implementation
In this course, students compare, contrast, and evaluate contemporary practices in the implementation of security solutions. (3 credits)

IA8110 Certification and Accreditation
In this course, students analyze an enterprise-wide view of information systems and the establishment of appropriate, cost-effective information protection programs. Within this context, students examine a set of standard policies, procedures, activities, and a management structure to certify and accredit information systems for the protection of the data as well as the systems. (3 credits)

IA8120 Information Assurance Policy Planning and Analysis
In this course, students develop information assurance policies and deployment plans as part of the comprehensive strategic plan and operational objectives of the enterprise. (3 credits)

IA8190 Security Forensics
In this course, students explore the essentials of electronic discovery and analyze issues related to cyber evidence. (3 credits)

IA8210 Risk Management and Compliance
In this course, students evaluate the procedures and results of risk analysis, as well as the compliance processes that address the regulatory requirements which drive the need for risk analysis within the enterprise. Security-related regulations such as SOX, GLBA, FISMA and HIPAA are examined. (3 credits)

Elective Courses

IA7070 Enterprise Architecture and IT Security
In this course, students identify and transform high-level objectives and requirements into enterprise information assurance systems. Students also explore the interdependencies of operational processes and architectural controls. (3 credits)

IA8140 Business Continuity Planning and Recovery
In this course, students explore tools and strategies for Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) activities. Topics include business impact assessment methods, recovery strategy approaches and solutions, and continuity planning. (3 credits)

IA8150 Advanced Topics in Risk and Vulnerability Assessment
In this course, students examine leading tools, technologies and methodologies used in identifying, prioritizing and mitigating information system threats and vulnerabilities; identify and evaluate security controls; and formulate risk mitigation strategies. (3 credits)

IA8160 Advanced Topics in Intrusion, Detection and Prevention Methods
In this course, students review case studies describing security incidents and compare, contrast and evaluate the tactical countermeasures taken. (3 credits)

IA8170 Advanced Topics in Security Architecture Design Methodologies
In this course, students evaluate the critical factors in selecting and implementing security solutions that support a "defense-in-depth" security architecture. (3 credits)

IA8180 Wireless Security
This course explores emerging topics such as risks and vulnerabilities, assessment methods and standards associated with wireless technologies. (3 credits)

IA8220 Security Program Strategies and Implementation
In this course, students explore the components of a security program for an enterprise and develop a strategy for its implementation. (3 credits)

IA8230 Legal and Ethical Management Issues in Information Security
In this course, students explore issues with respect to the legal and regulatory environment of security and the challenges faced in developing and managing policy related to enterprise security. (3 credits)

IA8240 Strategic and Technological Trends in Information Security
In this course, students assess and evaluate technical trends and emerging technologies in information assurance and examine their impact on the implementation of security programs. (3 credits)

IA900X Advanced Research Analysis
In this course, students who have an approved modified program of study work with an advisor to investigate research opportunities within the context of the ten domains of Information Security. (3- 6 credits)
Prerequisite: Approved petition for modified program of study.

PM8110 Strategic Program Management in Information Security
In this course, students complete a program management review applying the methods and skills acquired in previous coursework. (3 credits)
Prerequisite: PM8100

DISSERTATION COURSES

Dissertation Preparation Courses

RM9100 Qualitative and Quantitative Analysis
In this course, students compare, contrast, and evaluate qualitative and quantitative methods of data analysis for solving information assurance problems and conducting information security-related field research. (3 credits)

RM9300 The Research Paradigm
In this course, doctoral students utilize a published research study as a model to review and analyze the research paradigm and the components of empirical research. Students then create a prototype of a field research study, which replicates the research design of the model, for an alternative Information Security research question. (3 credits)

RES9100 Feasible Problem-Driven Research in Information Security
In this course, students apply the concept of problem-driven research in order to identify feasible topic areas for their field research study. Students also identify a research site and utilize problems occurring there as a basis for selecting a researchable (feasible, non-trivial) research topic. Finally, they identify the dependent variable to be studied. (3 credits)

RES910X Continuing Feasibility Analysis
Students needing more time to identify an approved topic or research site must enroll in this course, and must repeat the course until the topic is approved. (3 credits)

RES9110 Research Topic Rationale
In this course, students articulate the problem statement and conduct a preliminary research literature review in Information Security to develop the rationale for their research. In addition, students identify other relevant bodies of research to be examined. (3 credits)
Prerequisite: DST9100

RES9120 Review and Synthesis of Prior Research
In this course, students expand the literature review and synthesize relevant empirical research in order to provide justification for the proposed research. In so doing, students narrow the focus of the proposed topic, formulate the final research question, identify the opportunity to contribute to knowledge in the Information Security arena, and describe the theoretical foundation for their dissertation research. (3 credits)
Prerequisite: DST9110

RES9130 Research Design: Theory and Methodology
In this course, students define the theoretical framework and select a research design approach (exploratory or hypothesis-testing). In addition, they evaluate the feasibility of standard research design types within the context of the proposed research site and document resource requirements for the proposed project. (3 credits)
Prerequisite: DST9120

RES913X Continuing Theory and Methodology
Students needing more time to complete the Proposed Research Plan (PRP) must enroll in this course, and must repeat the course until the PRP is approved. (3 credits)

RES9140 Research Design: Data Collection Plan
In this course, students develop the data collection plan based upon the selected research approach and design type. This plan specifies the methods to be utilized for measuring the variables as well as the data collection procedures to be followed. (3 credits)
Prerequisite: DST9130 and Doctoral Candidacy Status

RES9150 Research Design: Data Analysis Plan
In this course, students develop the data analysis plan based upon the selected research approach and design type. This plan specifies the data analysis methods and procedures to be utilized in the research. (3 credits)
Prerequisite: DST9140

RES9160 Research Design Specification
In this course, students finalize the operational requirements of the proposed research study by producing the Research Design Specification (RDS). (3 credits)
Prerequisite: DST9150

RES916X Continuing Research Design Specification
Students needing more time to finalize the RDS must enroll in this course, and must repeat the course until the RDS is approved. (3 credits)
Prerequisite: DST9160

Dissertation Development Courses

DST9200 Data Collection and Analysis
In this course, doctoral candidates implement the approved research design by collecting and analyzing data. (1-6 credits)
Prerequisite: DST9160

DST9210 Dissertation Documentation and Defense
In this course, candidates produce and submit the final draft of the dissertation for approval. Once the document has been approved by the Dissertation Committee Chairperson candidates present their findings to the Dissertation Committee at the defense. (1-6 credits)
Prerequisite: DST9200

DST922X Continuing Dissertation Development
Doctoral candidates requiring additional time to produce an approved dissertation enroll in this course until the dissertation is approved for defense. (0 credits)
Prerequisite: DST9210

PREREQUISITE COURSES

IA5010 Principles of Information Systems and Technology
This course provides students with an overview of the principles and concepts of information systems and technology that serve as the foundation for information security. (3 credits)

IA5030 Principles of Information Security
This course provides students with the principles and concepts that serve as the foundation for information security. (3 credits)

NON-CREDIT COURSES

IC7010 INFOSEC Assessment Methodology
This course, taught through the University of Fairfax/Security Horizon Alliance, presents a standardized INFOSEC assessment methodology developed by the National Security Agency (NSA). The two-day course concludes with the IAM certification exam. (0 credits)

IC7020 INFOSEC Evaluation Methodology
This course, taught through the University of Fairfax/Security Horizon Alliance, presents a standardized INFOSEC evaluation methodology developed by the National Security Agency (NSA). The two-day course concludes with the IEM certification exam. (0 credits)
Prerequisite: IC7010 or NSA IAM Certification