This course will provide students with a firm understanding of the technologies and practices of information security and assurance, with emphasis on the intersection of technical and operational controls with risk management concepts and techniques. Key topics include: risk assessment and management, encryption, access control, secure system and network design, intrusion prevention and detection, remediation and recovery processes, policy and program development, and the role of information security in the enterprise.