Minor in Cyber Audit, Controls and Compliance

Overview

The Cyber Audit, Risk and Compliance (Cyber Audit) Minor is designed for Business and Accounting students who want to complement their major by adding the valuable and highly sought after skill set of IT Audit. The Cyber Audit Minor differs from the Cyber Security minor offered by the Computer Science Department in that it does not require students to take  computer programming courses that are technically advanced and geared for computer science students.  The Cyber Audit Minor focuses on data risk from an operational vs technical perspective which falls within the responsibilities of senior management.

Students electing the Cyber Audit Minor will learn methods of identifying IT controls and assessing potential IT risk based on industry standards and frameworks such as COBIT and NIST.  Students will have hands-on experience working through an IT Audit to identify the risk of data integrity and determining how to best manage the identified risks.  Students will also learn how to communicate risks from an operational standpoint while working with technical departments within an organization.

Curriculum Requirements

Total Credits Required: 15

Required Courses for a Minor in Cyber Audit Risk and Compliance

AC420	Information Technology and Compliance	3
CS106	Introduction to Cybersecurity	3
CS230	Cybercrime and Governance	3
CS480	Network and System Security	3

Course Descriptions

Required Courses:

AC 420 IT Audit: Prerequisite AC360

A comprehensive review of the fundamental concepts of IT auditing and the application of those concepts. Topics include IT governance, regulatory environment, general controls, application controls, and end-user computing.  Students will learn how to identify key controls and risk in each stage of the application processing cycle utilizing a top-down, risk-based approach. Data Management risk will be a key topic and incorporated throughout the risk management cycle.  Offered every year.

 

CS106 Introduction to Cybersecurity:

Prerequisite: none

In todays’ word, no one is safe from cyber-attacks, but everyone can be prepared. This course will teach you how malicious actors use social skills and technology to facilitate cyber-attacks and provide you with the tools and information you need to defend those attacks. Whether you pursue one of the many available jobs in cybersecurity or just want to secure your won privacy, you will learn how to make the Internet safer.

 

CS230 Cybercrime and Governance

Prerequisite: CS106

Cybercrime is one of the biggest threats companies face on a daily basis, and they are constantly looking for new hires to help protect them. In this course, you will get a firsthand look at the methods used to commit cybercrimes. You will also learn how governments detect, investigate and stop these crimes, and become familiar with the laws and policies in place to deter cybercriminals.

 

CS 480 Introduction to Network Security (3)

Prerequisites: none

The course covers IP security, in-depth treatment of user authentication, email security, web security, network management security, intrusion detection, penetration testing, malicious software, access control, firewalls, etc. Information Security architecture will be a key topic and students will learn how to identify different layers of security by creating access path diagrams. 

 

ELECTIVES: Select one of the following:

CS231 Modern Cybersecurity

Prerequisite: none      

Just as technology is constantly evolving, so too must cybersecurity to keep pace with changing trends. In this class, you will learn about the changing landscape of cybersecurity, emerging technologies that are likely to be targeted, and new forms of cyber-attack being launched. By the end of the course, you will be able to implement the most up-to-date practices in cybersecurity in order to protect against attacks.

 

CS 307 Database Systems Design and Management (3)

Prerequisite: CS 201 or BU221/BU265 or AC305

Introduction to files and database concepts, the design of a database for use in a relational database management system, the use of structured query language (SQL), and database administration and security. A database management programming language (SQL) is used to implement the concepts learned. Offered every year.

 

CS345 Introduction to Artificial Intelligence

Prerequisite: CS201

An introduction to the basic concepts of artificial intelligence and machine learning. Topics include intelligent system design methodologies, expert systems, natural language processing, puzzle solving, game playing, heuristic search, and basic problem-solving methods. Students will also learn about the AI ethics, safety, and reliability. Particular focus will be placed on real-world applications of the material.

 

CS 460 Cyber Forensics

Prerequisites: CS106 and CS230

The course covers file types (text, image, compressed, encrypted), operating systems basics, discovery of digital evidence, computer forensic tools, network basics, network tracing, network log files, network sniffing/trapping, legal issues, case studies, and computer forensics procedures.

 

CS491 Ethical Hacking

Prerequisite: CS480

To stop a hacker, you need to be able to think like a hacker. In this course, you will learn hands-on techniques for attacking and penetrating network systems. You will be prepared with tools to launch these offensive tactics, and then complete a hands-on project where they are asked to ethically hack a real system. This online class has optional live

Plus one of the following electives

CS231	Modern Cybersecurity	3
CS307	Database Systems Design and Management	3
CS345	AI and Expert Systems	3
CS460	Cyber Forensics	3
CS491	Capstone – Ethical Hacking	3

Co-requisites:  Accounting majors are required to complete Accounting Information Systems as part of their major.