Prerequisite: INFM600; or permission of INFO-College of Information Studies.
Looks at information system threats, vulnerabilities, risk assessment and management. Explores how regulations scope and define what is considered to be protected information. Considers how data assets are assessed and classified in terms of their levels of sensitivity. Discusses specifying data protection policies and the techniques for enforcing compliance with those policies.