This course is an introduction to the principles of information risk analysis, security controls, security planning and management. This course provides the foundation for understanding the key technical and managerial issues associated with threats and risks in information assets, security and compliance requirements faced in IT-intensive business environment. It covers methodologies for risk assessment, security planning, mechanisms for protection against risks and responses to security incidents, maintaining acceptable risks and compliance requirements. Not open to students who have taken BUS 315.