Analyzing Technology Risks (MIS675)

This course provides a working knowledge of risk analysis and management for enterprise security. The emphasis is on modeling, analysis, and economic evaluation of technology risks. Students learn about business continuity and disaster recovery planning, security risks, tangible and intangible consequences of security failures, risk mitigation options, and economic trade-offs. The first part of the course covers the basics of risk identification, assessment, control, and mitigation using a system framework. The second part covers application of decision theory and engineering economics to security options based on models that consider risk profile and uncertainty in enterprise security problems.