The Proceedings of the Information Systems Education Conference 2001: §13c Home Papers/Indices prev (§13b) Next (§14a)

Paper (refereed) Student-Faculty Papers

Recommended Citation: Haworth, D A and L R Pietron. Information Assurance Concentration in the Master of Management Information Systems (MIS) at the University of Nebraska at Omaha. In The Proceedings of the Information Systems Education Conference 2001, v 18 (Cincinnati): §13c.

Information Assurance Concentration in the Master of Management Information Systems (MIS) at the University of Nebraska at Omaha

Refereed

Dwight A. Haworth    [a1] [a2]
Information Systems
University of Nebraska at Omaha    [u1] [u2]
Omaha, Nebraska, USA    [c1] [c2]

Leah R. Pietron    [a1] [a2]
Information Systems
University of Nebraska at Omaha    [u1] [u2]
Omaha, Nebraska, USA    [c1] [c2]

The growth and availability of the Internet created serious vulnerabilities in connected systems. In response to this, the Federal Government has created several programs. Significant among those is the National Security Telecommunications and Information Systems Security Policy and the implementing directives that specify training standards for various professional positions related to telecommunications and information systems security. In response to the directives of the National Security Telecommunications and Information Systems Security Committee (NSTISSC) and to the results of independent research, the faculty of the College of Information Science and Technology at the University of Nebraska at Omaha decided to implement a concentration in Information Assurance as an option in the Master of Science in Management Information Systems Program. To cover the subject matter indicated by NSTISSC directives and by security incidents described in the press, four courses have been established and a fifth is in preparation: ISQA 8530-Electronic Commerce Security, ISQA 8540-Computer Security Management, ISQA 8560-Information Warfare and Security, ISQA 8570-Information Security Policy, Privacy, and Ethics, and ISQA 8580-Computer Security Investigations (under development). After developing these courses, an additional measure was undertaken to determine the coverage of the NSTISSC standards in these four courses. A spreadsheet was created to reflect the content coverage of the NSTISSC standards. The study determined the courses of the Information Assurance concentration provide substantial coverage of the requirements of NSTISSI No. 4013 - National Training Standard for System Administration in Information Systems Security.

Keywords: curriculum, information assurance, information security, security standards

Read this refereed paper in Adobe Portable Document (PDF) format. (135 K bytes)
Preview this refereed paper in Plain Text (TXT) format. (23 K bytes)

CDpic
Comments and corrections to
webmaster@isedj.org