In this course the student will learn how to assess threats and risks to information systems and to develop the business case to support solutions for dealing with these concerns. The student will also learn appropriate processes for the systematic valuation of IT security risks and begin to apply these to the development of recommendations to reduce the risk to an acceptable level. Students will demonstrate their ability to conduct an information risk assessment using a variety of modeling techniques.