Segurança

Proceedings of the 14th Colloquium for Information Systems Security Education
Baltimore Marriott Inner Harbor
Baltimore, Maryland June 7 - 9, 2010

Developing a Strategic Security Planning Module for Multidisciplinary Policies Courses
Jeffrey P. Landry, University of South Alabama

The remainder of this paper describes the educational approach used. It introduces a framework for integrating information security with information systems strategy and policy course, called strategic security planning. It aligns security-related learning activities with two information security education/training standards [2, 3], and describes the author’s development of a strategic security planning assignment. While all or most of the security management topics might be familiar to information security educators, what perhaps is novel about this paper is the integration of security management with strategic IS management course, where the topics are often compartmentalized.

Abstract – This paper describes an integrative approach for teaching information systems (IS) security issues within an IS strategy and policy course. The educational strategy is to get students involved in thinking critically about information systems (IS) security issues in an executive role. The educational goal is for students to develop an information systems plan, thinking about security issues early—that is, while information systems are in the planning stage—and in concert with the all-too-often compartmentalized topic of ethics. The result is a strategic security planning module. The educational approach is described and outcomes mapped to a pair of accepted information security education standards.
Index terms – information security management, planning, risk assessment, curriculum, outcomes

II. EDUCATIONAL APPROACH
Both the National Centers of Academic Excellence in
Information Assurance Education Program [4] and the information security common body of