Cyber Security and Privacy

ABOUT THE COURSE: This course introduces to management students the concepts, technologies, practices and challenges associated with cybersecurity as applied in organizations. Protection as well as disclosure of information pose unique challenges and also allude to economic and technological implications. The course takes a broad view of cyber security along with information privacy by analysing relevant organizational, human, legal and policy issues. Through this course, students will explore cyber security along with information privacy with a managerial focus. Students are expected to develop a wholesome understanding about cyber security and privacy risks to businesses covering governance, compliance and risk mitigation and closely study certain business domains.PREREQUISITES : A core course on Management Information Systems desirable (not mandatory)INDUSTRY SUPPORT : IT services industry, AI/Block chain start ups, Industry 4.0, autonomous vehicles industry

Week 1 : Foundations, cyber security, information security and related concepts, Principles of information security management, Confidentiality, Integrity, Availability and related concepts.

Week 2 : Security management, Governance, Risk and Compliance (GRC) , Contingency planning, incidence response, disaster recovery and business continuity.

Week 3 : Understanding security policy, security behavior , Risk management: Risk identification, threat modeling, strategies.

Week 4 : Control strategies and protection mechanisms (Guest lecture), Cryptography for security.

Week 5 : Information security and privacy, Regulatory landscape: Fair information practices, US regulatory frameworks .

Week 6 : Regulatory landscape: EU’s GDPR and its implications and other privacy and cyber security regulations, Cyber security and privacy in the Indian context, evolution and issues.

Week 7 : Economics of privacy, privacy calculus and trade-offs, privacy paradox, Managing stakeholders, making choices on security and privacy