IT 472 IT Compliance

As IT has become critical to the functioning of business, the importance of information security, accuracy and availability become paramount. In response, there has been an increase in the complexity of government and industry mandates from around the world. These regulations on IT direction and management can disrupt business, but also can elevate the organization to a more mature and secure operational posture where the upside of affirmative safeguards is tremendous and limited only by the organization's ability to execute and adapt. This course will investigate IT Compliance regulations including SOX, HIPAA, PCI-DSS, and 21 CFR 11. Students learn techniques for assessing compliance and integrating compliance initiatives into IT strategy, planning, and projects. 

Credits

5

Prerequisite

For students to succeed in this course, CS 330, CS 340 and IS 345 are required pre-requisite

Outcomes

1. As a result of this course, students will know or be able to do the following:
2. 1. Integrate the role of information systems security (ISS) compliance in relation to organizations.
3. 2. Apply specific U.S. compliance laws and standards, and how they affect IT operations.
4. 3. Analyze information security systems compliance requirements within the seven domains of an IT infrastructure.
5. 4. Evaluate parameters required to conduct and report on an IT infrastructure audit for organizational compliance.
6. 5. Evaluate the qualifications, ethics, and certification organizations for IT auditors.
7. 6. Create an audit plan to support business and system considerations.