Students learn the basic principles and the managerial aspects of securing enterprise information systems. Topics include risk management, security policy and plan development, security architectures, incident handling, disaster recovery planning, system administration, access control, and change management.