ISM 650-DL Master Syllabus

Costello College of Business Logo

ISM 650-DL: Managing Network and Data Security Master Syllabus


Course Instructor:
Office Number:
Office Hours:
Email:
Course Meeting Times:
Course Materials: 
Course Website Canvas


Course Materials

This class uses open educational resources. There is no textbook to purchase. All course materials are posted via ISM 650 Canvas course website.


Programs

Graduate Certificate in Information Security Management


Catalog Course Description

The course covers principles and practices of assessing network and data security needs, and implementation of the necessary security plan for communication networks and organizational data. The course addresses databases as well as unstructured data in files, including securing cloud infrastructure. More specifically, the course will focus on database security principles, database auditing, database reliability and implementation of database controls and security. In context of CIA triad of information security, threat classifications to the communication networks are discussed: eavesdropping (confidentiality), man-in-the-middle (integrity), and denial-of-service (availability). Real world examples of attack methods and cases of database breaches are discussed, as well as attacks on communication networks and networked applications are discussed to translate principles into reality. May not be repeated for credit.


Schedule Type

Lecture


Grading

This course is graded on the Graduate Regular scale.


Learning Objectives

Upon completion of this course, students will be able to:

  • Describe the principles and significance of network and data security.

  • Evaluate security risks faced by network and connected database applications.

  • Explain how various network security technologies and protocols work.

  • Develop a plan for monitoring network and database activities to identify security breaches, and associated response plan.

  • Translate organizational requirements to security policy and controls as part of network and data security needs of an organization.


Approach to Learning

This course is geared for the student who intends to be an information security management professional engaged in business, government, or the non-profit sector. The delivery will be in the form of class-lectures, discussions, and hand-on lab exercises. Discussions on the subject matter will be motivated through case studies, current/recent security incidents, and guest speakers. Competency with hands-on exercises to reinforce class lectures, and critical analysis will be particularly emphasized for successful learning.


Mason Core Learning Outcomes

  • Students will understand the principles of information storage, exchange, security, and privacy.

  • Students will become critical consumers of digital information; they will be capable of selecting and evaluating appropriate, relevant, and trustworthy sources of information.

  • Students can use appropriate information technologies to organize and analyze information and use it to guide decision-making.

  • Students will be able to choose and apply appropriate algorithmic methods to solve a problem.


ISOM Learning Goals

  • Apply knowledge of information technology, operations, and business functions to assess, design and improve business processes.

  • Develop data organization, storage, and processing solutions to support organizational needs for information management. Also develop skills in the area of business intelligence.

  • Use knowledge of computer networks as part of IT solutions for improving business processes.


Required Computers and Software

The Costello College of Business undergraduate program requires every student to have access to a computing device that satisfies the requirements listed below. Note that as technology changes rapidly, these requirements may change during a student’s time in the Costello College of Business. While most students have a computer or access to one, some courses require specific requirements due to the use of specific applications during class. To address these requirements, a list of standard minimum requirements has been determined and will be reviewed annually. 


Grading Policy

Letter grades are assigned based on the total number of points earned, not percentage of possible points. No curving will be applied. All assignments are closed at the listed due date and will not be accepted late.

Assignment Value
Discussions (2) 10 points
Case Study (4) 40 points
Exam (1) 20 points
Course Project (1) 30 points
Total 100 points
Letter Grade Grade Scale
A 93 to 100 points
A- 90 to 92.99 points
B+ 87 to 89.99 points
B 83 to 86.99 points
B- 80 to 82.99 points
C+ 77 to 79.99 points
C 70 to 76.99 points

Student Responsibilities

Students are responsible for keeping themselves updated on any changes on the course website. Without advance notice and approval, no extension, or options to retake if you miss any quiz or exam.


Methods of Student Evaluation

Online discussion, case studies, exam, and course project.


Honor Code

Students must strict adherence to the University honor system and code, as described in the current George Mason University catalog 2009-2010. Submitted assignments may be checked for honor code violations using electronic tools and other means. All violations will be notified to the Honor Code Committee for enforcement of academic integrity.


Communications

For privacy and confidentiality, you must use your George Mason email account to communicate with me. Your email will be answered within 24 hours. Assignments sent via email will NOT be graded.

Email Communications/Privacy

  • Student privacy is governed by the Family Educational Rights and Privacy Act (FERPA) and is an essential aspect of any course.

  • George Mason email must be always used for correspondence with the instructor. No exceptions. Students should clearly identify themselves and their course number and section in any email correspondence. I will not respond to messages sent from a non-George Mason email address.


Disability Accommodations

If you are a student with a disability and you require academic accommodations, please contact the Office of Disability Services (ODS) at (703) 993-2474 (ods@gmu.edu) and me, at the beginning of the semester. All academic accommodation due to disability must be arranged through the ODS and should be made during the first two weeks of the semester.


FERPA

All student records are protected by the Family Educational Rights & Privacy Act of 1974 (FERPA). Portions of this course may be audio-visually recorded so students who cannot attend a particular session or who wish to review material can access the full content. Students who participate orally, visually, via chat/discussion board agree to be recorded. The content of this recording may not be shared with anyone who is not registered in this class without written permission, as it is an educational record. 

Academic Integrity and Standards

George Mason University has the following clearly described University Honor Code administered by the Office for Academic Integrity: “To promote a stronger sense of mutual responsibility, respect, trust, and fairness among all members of the George Mason University community and with the desire for greater academic and personal achievement, we, the student members of the University Community have set forth this: Student members of the George Mason University community pledge not to cheat, plagiarize, steal, or lie in matters related to their academic work.

The Honor System and Code adopted by George Mason University will be enforced for this class: http://oai.gmu.edu/mason-honor-code/full-honor-code-document/.

Link to Academic standards: https://academicstandards.gmu.edu/academic-standards-code/

As a student you are responsible for upholding these standards for this course. It is your responsibility to be aware of the consequences of cheating, fabrication, facilitation, and plagiarism. In your work on all written assignments, keep in mind that you may not present as your own the words, the work, or the opinions of someone else without proper acknowledgement. You also may not borrow the sequence of ideas, the arrangement of material, or the pattern of thought of someone else without proper acknowledgement. Faculty are obligated to submit any Honor Code violations or suspected violations to the Honor Committee without exception. Any suspected case of honor code violation will be reported to the Office of Academic Integrity immediately. In such a case, I will withhold from grading your assignments until after the case is cleared by the Office of Academic Integrity. All students are expected to adhere to this code. All acts of academic dishonesty will be dealt with in accordance with the provisions of this code.


AI (Artificial Intelligence) Tools Policy

The learning objectives for this course require students to demonstrate skills and practices that they can reliably perform without supplemental tools. All work submitted in this course must be your own original work; use of AI tools are prohibited in this course.


George Mason Common Course Policies

See Common Policies Addendum.


Costello College of Business Standards of Behavior

The mission of the Costello College of Business at George Mason University is to create and deliver high-quality educational programs and research. Students, faculty, staff, and alumni who participate in these educational programs contribute to the well-being of society. High-quality educational programs require an environment of trust and mutual respect, free expression and inquiry, and a commitment to truth, excellence, and lifelong learning. Students, program participants, faculty, staff, and alumni accept these principles when they join the Costello College of Business community. In doing so, they agree to abide by the following standards of behavior:

  • Respect for the rights, differences, and dignity of others

  • Honesty and integrity in dealing with all members of the community

  • Accountability for personal behavior

Integrity is an essential ingredient of a successful learning community. Ethical standards of behavior help promote a safe and productive community environment and ensure every member the opportunity to pursue excellence. The Costello College of Business can and should be a living model of these behavioral standards. To this end, community members have a personal responsibility to integrate these standards into every aspect of their experience at the Costello College of Business. Through our personal commitment to these Community Standards of Behavior, we can create an environment in which all can achieve their full potential. Honor Code Statement: By choosing to take this course, you agree to uphold the George Mason University Honor Code. Please refer to the Office of Academic Integrity for further details. George Mason University Honor Code: To promote a stronger sense of mutual responsibility, respect, trust, and fairness among all members of the George Mason University community and with the desire for greater academic and personal achievement, we, the student members of the University Community have set forth this: Student members of the George Mason University community pledge not to cheat, plagiarize, steal, and/or lie in matters related to academic work. In your work on all written assignments, keep in mind that you may not present as your own the words, work, or the opinions of someone else without proper acknowledgement. You also may not borrow the sequence of ideas, the arrangement of material, or the pattern of thought of someone else without proper acknowledgement.


Academic and Educational Sanctions

Violations of Academic Standards are sanctioned according to a common matrix. Sanctions include both educational and administrative components. Student violations of Academic Standards are sanctioned according to following matrix:

Finding Sanction
Level 1
  • 0% on the assessment and an additional letter grade reduction in the final course grade

  • University Integrity Educational Interventions (*) (determined by the Academic Standards Office)

Level 2
  • Failure of relevant Course or Assessment (comprehensive exams, dissertation, thesis, etc.)

  • University Integrity Educational Intervention (*)

* Education Interventions may include online learning modules, visits to the writing center, or other programs to assist the student in understanding and remediating the violation.


Suspension, Dismissal, and Termination

In some cases, violations of Academic Standards rise to the level that merits a pause or removal from studies. Suspension, Dismissal, and Academic Termination decisions are based on the program level of the student, the number of previous offenses, and the severity of the offense. The decision to refer a violation for potential suspension or dismissal consideration is made in accordance with the sanctioning matrix. Where there is discretion to recommend a student for suspension or dismissal, Academic Standards Staff will decide. For undergraduates, the timing and process of suspensions follow the Academic Suspension process as listed in AP5.2.6. Graduate Students can be suspended or terminated from their program. If a student is found in violation, the outcomes are adjudicated through the matrix below:

Student Program Level 1st Referral to ASO 2nd Referral to ASO 3rd Referral to ASO 4th Referral to ASO
Undergraduate Potential Recommendation for Academic Suspension OR Permanent Dismissal Automatic Recommendation Academic Suspension OR Potential Recommended for Permanent Dismissal Automatic Academic Suspension OR Automatic Recommendation for Permanent Dismissal Automatic Recommendation for Permanent Dismissal
Graduate Automatic Recommendation for Academic Suspension AND Potential Recommended for Program Termination Automatic Academic Suspension AND Automatic Recommended for Program Termination Automatic Program Termination  

Topical Outline

You are expected to work 8-10 hours per week for this class.
You are expected to check ISM 650 Canvas course website and your email daily.

Assessment in ISM 650 includes discussions, case studies, exam, and course project that must be completed by set deadlines, with the understanding that late submissions are not permitted under any circumstances. This approach reinforces the importance of time management and adherence to deadlines, skills that are vital in the fast-paced world of network security.

To help you manage your schedule and time to complete the assignments in this course, please follow the recommended timeline below. If you have a question or concern or encounter a problem about an assignment, please contact me immediately so we can discuss and work out a resolution.

Weeks Modules Assignments Due Dates
 

Module 0

Database Management System

Computer Network

  1. Complete Ice Breaker Discussion. (Time to complete: ~30 minutes)

  2. Read about the course requirements and policies. (Time to complete: ~30 minutes)

  3. Watch the module videos. (Time to complete: ~30 minutes)

  4. Study the module materials. (Time to complete: ~60 minutes)

 
1

Module 1

Security Defense Models

Systems Hardening

Hardening Operating System

  1. Complete Discussion #1. (Time to complete: ~105 minutes)

  2. Review Course Project requirements (Module 8). (Time to complete: ~45 minutes)

  3. Watch the module videos. (Time to complete: ~45 minutes)

  4. Study the module materials. (Time to complete: ~75 minutes)

Due Date: XX/XX

2

Module 2

Network Security

Vulnerabilities

Network Assessment

  1. Complete Case Study #1. (Time to complete: ~180 minutes)

  2. Start working on the Course Project (Module 8). (Time to complete: ~60 minutes)

  3. Watch the module videos. (Time to complete: ~45 minutes)

  4. Study the module materials. (Time to complete: ~75 minutes)

Due Date: XX/XX

3

Module 3

Network Services

Storage Security

  1. Complete Case Study #2. (Time to complete: ~180 minutes)

  2. Continue working on the Course Project (Module 8). (Time to complete: ~45 minutes)

  3. Watch the module videos. (Time to complete: ~60 minutes)

  4. Study the module materials. (Time to complete: ~45 minutes)

Due Date: XX/XX

4

Module 4

Network Security

Monitoring

Network Protection

  1. Complete Discussion #2. (Time to complete: ~150 minutes)

  2. Continue working on the Course Project (Module 8). (Time to complete: ~45 minutes)

  3. Watch the module videos. (Time to complete: ~45 minutes)

  4. Study the module materials. (Time to complete: ~60 minutes)

Due Date: XX/XX

5

Module 5

Application Security

Web Application Security

  1. Complete Case Study #3. (Time to complete: ~180 minutes)

  2. Continue working on the Course Project (Module 8). (Time to complete: ~75 minutes)

  3. Watch the module videos. (Time to complete: ~45 minutes)

  4. Study the module materials. (Time to complete: ~60 minutes)

Due Date: XX/XX

6

Module 6

Database Security

Data Security

  1. Complete Case Study #3. (Time to complete: ~180 minutes)

  2. Continue working on the Course Project (Module 8). (Time to complete: ~75 minutes)

  3. Watch the module videos. (Time to complete: ~45 minutes)

  4. Study the module materials. (Time to complete: ~60 minutes)

Due Date: XX/XX

7

Module 7

Harden Database Security

Harden Data Security

  1. Complete the Exam. (Time limit: 90 minutes)

  2. Continue working on the Course Project (Module 8). (Time to complete: ~15 minutes)

  3. Watch the module videos. (Time to complete: ~30 minutes)

  4. Study the module materials. (Time to complete: ~75 minutes)

Due Date: XX/XX

8

Module 8

Course Project

  1. Complete the Course Project. (Time to complete: ~600 minutes)

    1. Module 1 to 7: ~300 minutes

    2. Module 8: ~300 minutes

  2. Complete the course evaluation. (Time to complete: ~15 minutes)

  3. Review next steps in the program. (Time to complete: ~15 minutes)

Due Date: XX/XX


To print: Right-click and choose “Print,” then follow your browser’s print settings.
To download: Right-click and choose “Print,” then select “Save as PDF.”