1. Home
  2. FB GRADUATE COURSES
  3. ERMS 690: Information Risk Management and Security

ERMS 690: Information Risk Management and Security Report a Broken Link

This course explores the world of technology and information security from a risk management perspective. Through an understanding of history and the examination of trends in today’s technology landscape, the course investigates the sources of risk and its business implications. Practical hands-on methodologies on the handling of risks are covered, as well as the process of reviewing and developing security management plans and governance frameworks.

Ebook

Ebook: Dempsey, T. (2015). Navigating the digital age: The definitive cybersecurity guide for directors and officers. Caxton Business & Legal, Inc. Chicago, IL. Retrieved from https://www.caxtoninc.com

Download the PDF to complete the readings as assigned in the Workplan.

Required Readings

Week 3

Case 1: Dube, L. (2016). Autopsy of a data breach: The target case. International Journal of Case Studies in Management. Ivey ID: HEC130. London, Canada: Ivey Publishing.

Read this case in order to participate in this week's Think Tank.

Week 4

Case 2: Srinivasan S. and Pitcher, Q. (2017). Data breach at Equifax. Harvard Business School. Ivey ID: 118031. London, Canada: Ivey Publishing.

Read this case in order to participate in this week’s Think Tank.

Week 5

Case 3: McGee, H., Hsieh, N, & McAra, S. (2017). Apple: Privacy vs. safety (A). Harvard Business School. Ivey ID:316069. London, Canada: Ivey Publishing.

Read this case in order to participate in this week’s Think Tank.

Week 6

Case 4: Nelson, R., & Wright, R. (2017). The Phoenix project: Remediation of a cybersecurity crisis at the University of Virginia. McIntyre School of Commerce. Ivey ID: UVAENT0218. London, Canada: Ivey Publishing.

Read this case in order to participate in this week’s Think Tank.

NOTE: This case is also used in Assignment 1.

Week 7

Reading 1: Shackelford, S. (2016). Business and cyber peace: We need you! Business Horizons, 59(5), 539-548.

Week 8

Case 2: Srinivasan S. and Pitcher, Q. (2017). Data breach at Equifax. Harvard Business School. Ivey ID: 18031. London, Canada: Ivey Publishing.

NOTE: This is the same case that was studied in Week 4. Please re-read it in order to participate in this week’s Think Tank.

Supplementary Readings

Week 1 Supp. Rdgs.

Supp. 1: The weakest link: A user security game. (n.d.). Retrieved from https://www.isdecisions.com/user-security-awareness-game/
Supp. 2: Rubin, A. (2011, October). All your devices can be hacked. Retrieved from https://www.ted.com/talks/avi_rubin_all_your_devices_can_be_hacked?language=en

Week 2 Supp. Rdgs.

Supp. 3: Schneier, B. (2010, October). The security mirage. Retrieved from https://www.ted.com/talks/bruce_schneier?language=en
Supp. 4: Cooper, C., & AT&T. (2017, November 16). 5 Fundamentals in cyber risk management. Retrieved from https://www.csoonline.com/article/3235511/data-breach/5-fundamentals-in-cyber-risk-management.html

Week 3 Supp. Rdgs

Supp. 5: Schneier, B. (2010, October). The security mirage. Retrieved from https://www.ted.com/talks/bruce_schneier?language=en
Supp. 6: Radichel, T. (2014). Case Study: Critical controls that could have prevented Target breach. SANS Institute InfoSec Reading Room, 1-32. Retrieved from https://www.sans.org/reading-room/whitepapers/casestudies/paper/35412

Week 4 Supp. Rdgs

Supp. 7: Fleishman, G. (2018, September 8). Equifax data breach, one year later: Obvious errors and no real changes, new report says. Fortune.com. Retrieved from http://fortune.com/2018/09/07/equifax-data-breach-one-year-anniversary/

Week 5 Supp. Rdgs

Supp. 8: Stavridis, J., & Weinstein, D. (2017, December 6). Apple vs. FBI is not about privacy vs. security—It's about how to achieve both [blog post]. Huffpost. Retrieved from https://www.huffingtonpost.com/admiral-jim-stavridis-ret/apple-fbi-privacy-security_b_9404314.html

Week 6 Supp. Rdgs

Supp. 9: Hardiker. D. (2018, August 6). What the Phoenix Project can teach you about DevOps and IT [blog post]. Adaptivist. Retrieved from https://www.adaptavist.com/blog/what-the-phoenix-project-can-teach-you-about-devops-and-it/