This subject is designed to demonstrate to students how to design, engineer, implement, and run an information security program, focusing on the knowledge and skills aligned with a Certified Information Systems Security Professional (CISSP).

Knowledge Core Competency Objectives:

1. Describe access control systems and methodology.
2. Define cryptography and its applications.
3. Summarize law, investigation techniques, and ethics in information security.
4. Define security architecture and models.
5. Describe telecommunications and networking security.

Skill Core Competency Objectives:

1. Apply application and systems development security.
2. Implement business continuity planning and disaster recovery planning.
3. Implement operations security.
4. Implement physical security.
5. Handle security management practices.

Upon completing this subject, students are expected to have a solid understanding of information systems security concepts aligned with CISSP standards and be able to apply these concepts effectively in a business environment. The emphasis is on both theoretical knowledge and practical skills necessary for designing and implementing a robust information security program.