Norwich University | Master of Science in Information Assurance





Information Assurance Program:
MSIA Home
Message from the Director
Program Overview
Curriculum Overview
Individual Case Study Project
Frequently Asked Questions - Case Study
Faculty
Admissions
Webinars
Frequently Asked Questions

Information Assurance News




Home » Master of Science in Information Assurance »

MSIA Curriculum Overview


The MSIA program is divided into three six-month semesters, each consisting of two eleven-week, six credit seminars. The topics covered in each seminar introduce you to the most critical and relevant areas in information assurance today. The seminars are strategically sequenced to build context for future seminars, and must be taken in the order presented. The fifth and sixth seminars offer a concentration option to allow you to pursue your specialized area of interest. The program culminates with a one-week residency and graduation ceremony at Norwich University in June. There are four start dates per year - March, June, September and December.


Semester 1:

Seminar 1: Foundations & Historical Underpinnings of Information Assurance (GI512)
The first seminar provides a discourse on the core foundations of information assurance. A survey seminar, Seminar 1 discusses where the discipline of information assurance came from, what comprises it and what we mean by key elements such as architecture, cryptography, computer-related crime, privacy, security standards and regulatory requirements. It relates information assurance elements to foundational and current computer security models in a practical manner that makes the connection between theory and practice. Seminar 1 prepares the student for a deeper understanding of information assurance technology, human factors in information assurance, risk management, management issues and analytics/metrics. (6 credit hours)

Seminar 2: Information Assurance Technology (GI522)
The second seminar examines the range and effectiveness of the technical tools used to protect the information infrastructure. These tools include cryptography systems, identification and authentication, operating system security, e-commerce safeguards, firewalls and proxy servers, anti-malware and anti-spyware technology, software development and quality assurance, and anti-piracy techniques. (6 credit hours)


Semester 2:

Seminar 3: Human Factors and Managing Risk (GI532)
This seminar takes up the related subjects of human factors and managing information systems risk. Information assurance generally is considered as much of a people problem as it is a technical problem. Risk in information systems is heavily influenced by human factors. In recognition of that connection this seminar addresses operations security, awareness, ethics and applications of social psychology. Coupled with these are principles of risk management including two contrasting risk analysis methodologies as well as an overview of other lesser methodologies, policy issues and employment practices and policies. Understanding the convergences between policy, human factors and risk management methodologies leads to practical application of information assurance in the organization. (6 credit hours)

Seminar 4: Information Assurance Management and Analytics (GI542)
The final core seminar ties the first three seminars together by discussing the overall techniques of information assurance management, leadership and analytics. Analytics are important and powerful management tools so these topics are covered from the perspectives of measuring both business and technical performance. Application of analytics to the management process supports problem solving, management and decision-making processes. Project management adds to the smooth execution of IA projects. Management and leadership are distinctly different disciplines and this seminar handles them as such. Finally, selling security to management and constituents often is a challenge and this seminar addresses that directly. (6 credit hours)


Semester 3:

Choose from one of the following concentrations.

Managing Cyber Crime and Digital Incidents
In this concentration students will develop a dual perspective on a cyber crimes and digital incidents response. You will start this concentration studying computer security incident response team management. This will solidify your abilities to establish and manage a cyber forensic team and/or an investigation. You will develop your expertise in responding to legal and policy issues during an investigation and interacting with the appropriate authorities. The second part of this concentration will examine cyber forensic investigations. This will enhance your core competencies in investigative work, by providing a deeper understanding of investigative skills, and intensifying your ability to analyze and report investigative outcomes.

Seminar 5: Computer Security Incident Response Team Management (GI554)
Seminar 6: Cyber Forensic Investigations (GI551)

OR

Business Continuity Management
The focal point in this concentration involves developing a resilient organization. This concentration provides both the fundamental technical knowledge of emergency preparation and disaster response, and the management and leadership skills needed to effect organizational change and develop risk management processes across the enterprise. You will acquire the skills required to manage a business continuity plan from strategy, creation, analysis, implementation, and response.

Seminar 5: Foundations of Business Continuity Management (BC510)
Seminar 6: Principles of Incident Response and Emergency Management (BC520)


Unique Case Study Project

Move from theory to practice through our unique case study program. You will obtain permission from an organization to study its security practices or you may select an industry as a subject for research on broader security practices. Most students choosing an organization-based case study will request permission from their employer, but many have successfully pursued case studies with other organizations. You will follow your case study through the first four seminars of the program.

In each seminar you will analyze the impact of security requirements and practices on your case study subject. At the end of each seminar you will create an extensive report evaluating your chosen security environment and propose recommendations for improvement and increased security effectiveness. These four reports will provide you with invaluable data and help you establish yourself as a security leader. Visit the Case Study page for more information.

Confidentiality

As security professionals, the developers and directors of the MSIA have been concerned about the confidentiality of our students' employers' information since the inception of the program. Only the Program Director, the Associate Program Director, and MSIA administrative staff have access to information about a student's employer during the admissions process. University staff members in the offices of the Registrar and the Bursar may also have access to employer information because of student financial arrangements.

As an MSIA student, you need never reveal where you work to students and faculty in the program:
  • You may use a non-employer e-mail address
  • You may refer to your employer as "my employer" or "the organization"
  • If your case study organization is not your employer, use a similar neutral identifier in all discussions and term papers
  • You need not indicate in which city, area of the country or even country where you live
  • You have no obligation to reveal which branch of the government or military you work for
  • You are under no pressure whatsoever to compromise the confidentiality of your employer's information, or that of your case study organization
The only people who must read your term papers are your Instructors; if you wish to share your papers with other students as part of a peer-review process, that's entirely up to you. Other members of the MSIA staff may read papers as part of their quality-control duties. In cases of suspected academic dishonesty, the Norwich University Committee on Academic Integrity will also read specific papers.

As a matter of professionalism, propriety, privacy and academic integrity no part of any student work or discussion should ever be quoted, circulated or republished without explicit permission from the writer.


« Go Back ^ Top of Page
Live Chat
Request More Information
Refer a Friend
Contact Us: 1-800-460-5597 ext. 3376










Norwich University | 158 Harmon Drive | Northfield, Vermont | 05663 | USA
webmaster@grad.norwich.edu © 2009 by the President and Trustees of Norwich University | Privacy Policy | Sitemap | Site Search