Study of fundamental issues and principles of computer and information security. Background in the evolution, organizational needs, threats, attacks, including legal and ethical issues.  Understand security planning, risk management, access control, authentication, security technology, intrusion detection, prevention, cryptography, secure communications protocols, physical security, and project plan. Concerns such as positioning the information security function and security maintenance will also be covered.