Information Security
The specialization in Information Security (InfoSec) provides students with a greater level of understanding and competence in public and private sector best practices of providing information security in the following dimensions: physical, operational, data, and personnel.
To complete the InfoSec specialization, students in the IM degree program must take the two required courses (*) from the list below. In addition:
- Students in the Main Campus IM program must then take two more courses from the list.
- Students in the mid-career IM program in Washington, D.C., must take one more course from the list.
- Students who are graduates of the NDU/IRMC IA Certificate Program will take IST 634 instead of IST 522.
- Students in the Maxwell School MPA or Executive MPA graduate programs who want the InfoSec specialization must take IST 618: Information Policy, the two required (*) courses, plus one more from the list.
- IST 522* Applied Information Security
- IST 623* Introduction to Information Security
- IST 625 Enterprise Risk Management
- IST 629 Organizational Information Security
- IST 634 Security in Networked Environments
- IST 647 Digital Forensics
- IST 724 Database Security
- IST 725 IT Security Architecture
- IST 728 Information Security Policy
Coursework targeted directly for preparation for the following InfoSec-related positions:
- Information Security Administrator/Analyst/Consultant
- Information Security Engineer/Scientist
- Network Security Administrator/Engineer/Analyst /Consultant
- Information Security Architect
Core competencies expected, and often required, in InfoSec-related positions:
- Familiarity with multiple OS environments such as Windows, UNIX, Linux, AS/400, Mainframe, etc.
- Expertise in security issues in LAN, WAN, Voice, and Wireless networks;
- Ability to architect, design, and implement organization-wide security, disaster recovery, and resumption policies and procedures;
- Knowledge in built-in application security function/services in Oracle, DB/2, MS Active Directory, Lotus Notes, MS Exchange, SAP R/3, and others is highly desirable;
- Strong competency in networking technologies such as routing, switching, etc.;
- Competencies in intrusion detection, vulnerability scanning, monitoring networks, authentication and access controls, encryption, etc.;
Highly valued and desirable certification: CISSP.
Other helpful certifications: SANS, CISA, CCNA.