IT 505 GOVERNANCE, RISK & COMPLIANCE

This course examines the triad of Governance, Risk and Compliance (GRC) as an essential framework for the management of information technology with business. Governance describes the overall management approach through which senior executives direct and control the entire organization. IT Governance is part of overall governance and focused on determining how best to use technology to support business goals. Risk management comprises a set of processes, tools and techniques to assist the organization in identifying and prioritizing its key assets, identifying risks, qualitatively and quantitatively assessing those risks, and determine mitigation strategies. Compliance refers to the responsibility of organizations and their technology departments to comply with internal and external requirements. Topics include governance and risk frameworks, legal and regulatory requirements such as SOX, HIPAA, FERPA, FISMA, NERC, FERC, BASEL II, ISO and PCI.

Credits

Prerequisite

Master of Science in Information Technology and Cybersecurity certificate students: None. STEM Master of Business Administration, Master of Science in Information Technology Leadership, and Dual STEM Master of Business Administration and Master of Science in Information Technology Leadership students: MGT 502 (may be taken concurrently) Bachelor’s level students: QM 202.

Distribution

INFORMATION TECHNOLOGY