MSISPM Curriculum

With the analytical methods, technical know-how, fresh perspectives, and robust management skills you'll gain from the MSISPM curriculum, you'll be well equipped to define, execute and implement effective business intelligence and security strategies for any organization. The vast resources at Carnegie Mellon allow you to focus your curriculum on the business, technology, strategy, or risk management aspects of information assurance.

Our curriculum is unique from other schools in that it examines information security management, not from an engineering or computer science perspective, but from a public policy and management perspective.

Below is a sample curriculum. Your curriculum will vary depending on your choice of electives, classes you exempt, choice of thesis or project, and your course load.

MSISPM Core
MSISPM Elective

 

First Semester (Fall)

Course Number Course Title Units
95-705 Telecommunications Management 12
95-752 Introduction to Information Security Management 12
95-760 Decision Making Under Uncertainty 6
95-796 Statistics for IT Managers 6
95-759 Terrorism, Security, and Intelligence 6
94-806 Privacy in the Digital Age 6

Second Semester (Spring)

Course Number Course Title Units
95-830 Introduction to Security and Policy 12
95-710 Economic Analysis 6
95-715 Financial Accounting 6
95-716 Principles of Finance 6
95-768 Defensive Hacking: Tactical and Strategic 12
95-753 Internet Security 6

Third Semester (Fall)

Course Number Course Title Units
95-770 Security Policy Seminars 12
94-700 Organizational Design and Implementation 6
95-841 Information Assurance Policy 12
95-855 Network Situational Awareness 12
95-808 IT Project Management 6

Fourth Semester (Spring)

Course Number Course Title Units
95-720 Information Security Project 24
95-757 Information Security Risk Policy & Management 6
95-769 Network Security Analysis 12
94-818 Policy Topics: Information Security Policy 6

 

Featured Course: Introduction to Information Security Management
This course introduces you to material essential for effectively managing or consulting on an organization's computer and network security. Explore topics in: computer system vulnerabilities; effective cryptographic techniques and protocols; access control policies and mechanisms; and implications of security technology in the realm of risk management.

You'll learn how to design and implement computer security policies and standards, formulate disaster recovery plans, and analyze system security architectures and physical security controls. Additional material covers the legal aspects of computer system auditing in a secure environment, and how to structure the management of a site's computer security on a daily basis.

  • Browse a list of other courses you'll be taking.