Laws, Frameworks, and Policies in Cybersecurity

4 credits

This course will provide an introduction to three critical areas of cybersecurity: laws, policies, and frameworks. In this course a review of data security compliance and regulatory laws including: General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley Act (SOX), Federal Information Security Modernization Act (FISMA), Family Educational Rights and Privacy Act (FERPA), Gramm-Leach-Bliley Act (GLBA), Payment Card Industry Data Security Standards (PCI DSS) will be discussed. A review of internal and external cybersecurity policies will be conducted including real-world examples. In addition, frameworks including the National Institute of Standards and Technology (NIST-800) framework will also be discussed. All of these topics will be discussed in terms of risk management and risk mitigation.