The ongoing digitization increases the importance for organizations to protect their digital assets, customer information, and privacy. To ensure such protection, organizations must adequately manage information security and customer privacy, which is associated with numerous challenges. This course addresses central organizational and management issues, processes, frameworks, theories, and challenges associated with the management of information security and privacy. Note: the course focuses on a management/organizational perspective. It is not a technical course.

Topics covered by this course are:
• Basic concepts associated with information security and privacy
• Risk management techniques for information security
• Organization of information security and privacy management
• Investment decisions with respect to information security
• Countermeasures for preventing information security and privacy incidents
• Measures for detecting security breaches
• Responding to information security breaches
• Tensions and tradeoffs with respect to privacy management
• Ethical perspectives on managing information security and privacy