Information Security
Master of Science in Information Management
Information Security Specialization of Study
The specialization in Information Security (InfoSec) provides students with a greater level of understanding and competence in public and private sector best practices of providing information security in the following dimensions: physical, operational, data, and personnel.
To complete the InfoSec specialization, students in the IM degree program must take the two required courses (*) from the list below. In addition:
- students in the main campus IM program must then take two more courses from the list
- students in the mid-career IM program in Washington DC must take one more course from the list
- students who are graduates of the NDU/IRMC IA Certificate Program will take IST 634 instead of IST 522
- students in the Maxwell School MPA or MAPA graduate programs who want the InfoSec specialization must take IST 618: Survey of Telecommunications and Information Policy, the two required (*) courses, plus one more from the list
| IST 522* |
Applied Information Security |
| IST 623* |
Introduction to Information Security |
| IST 625 |
Risk Management |
| IST 629 |
Organizational Information Security |
| IST 634 |
Security in Networked Environments |
| IST 728 |
Information Security Policy |
Coursework targeted directly for preparation for the following InfoSec-related positions:
- Information Security Administrator/Analyst/Consultant
- Information Security Engineer/Scientist
- Network Security Administrator/Engineer/Analyst /Consultant
- Information Security Architect
Core competencies expected, and often required, in InfoSec-related positions:
- familiarity with multiple OS environments such as Windows, UNIX, Linux, AS/400, Mainframe, etc
- expertise in security issues in LAN, WAN, Voice, and Wireless networks
- ability to architect, design, and implement organization-wide security, disaster recovery, and resumption policies and procedures
- knowledge in built-in application security function/services in Oracle, DB/2, MS Active Directory, Lotus Notes, MS Exchange, SAP R/3, and others is highly desirable
- strong competency in networking technologies such as routering, switching, etc
- competencies in intrusion detection, vulnerability scanning, monitoring networks, authentication and access controls, encryption, etc
- highly valued and desirable certification: CISSP
- other helpful certifications: SANS, CISA, CCNA