CSEC 125B - Policy, Legal, & Compliance

Credits: 3

Description
This course covers the laws governing business, contracts, fraud, crime, IT security, IT liability, IT policy, and ethics — all with a focus on electronically stored and transmitted records. Also covers how investigators prepare credible, defensible reports, whether for cyber, forensics, incident response, human resources, or other investigations. This course provides training and continuing education for many compliance programs such as GLBA, HIPAA, FISMA, and PCI-DSS.

Student Learning Outcomes

Determine the applicable laws and policies related to cyber defense of an organization.
Explore the responsibilities related to the handling of information about vulnerabilities.
Evaluate how the type of legal dispute (civil, criminal, private) affects the evidence used to resolve it.
Explore the applicable laws for compliance in a given situation.
Assess what the laws mandate and where they apply.
Conduct audits to determine compliance with laws.
Appraise the impact of legal/regulatory standards on a given system.

Corequisite: CSEC 101B