With the analytical methods, technical know-how, fresh perspectives, and robust management skills you'll gain from the MSISPM curriculum, you'll be well equipped to define, execute and implement effective business intelligence and security strategies for any organization. The vast resources at Carnegie Mellon allow you to focus your curriculum on the business, technology, strategy, or risk management aspects of information assurance.
Our curriculum is unique from other schools in that it examines information security management, not from an engineering or computer science perspective, but from a public policy and management perspective.
Below is a sample curriculum. Your curriculum will vary depending on your choice of electives, classes you exempt, choice of thesis or project, and your course load.
| MSISPM Core |
| MSISPM Elective |
| Course Number | Course Title | Units |
| 95-705 | Telecommunications Management | 12 |
| 95-752 | Introduction to Information Security Management | 12 |
| 95-760 | Decision Making Under Uncertainty | 6 |
| 95-796 | Statistics for IT Managers | 6 |
| 95-759 | Terrorism, Security, and Intelligence | 6 |
| 94-806 | Privacy in the Digital Age | 6 |
| Course Number | Course Title | Units |
| 95-830 | Introduction to Security and Policy | 12 |
| 95-710 | Economic Analysis | 6 |
| 95-715 | Financial Accounting | 6 |
| 95-716 | Principles of Finance | 6 |
| 95-768 | Defensive Hacking: Tactical and Strategic | 12 |
| 95-753 | Internet Security | 6 |
| Course Number | Course Title | Units |
| 95-770 | Security Policy Seminars | 12 |
| 94-700 | Organizational Design and Implementation | 6 |
| 95-841 | Information Assurance Policy | 12 |
| 95-855 | Network Situational Awareness | 12 |
| 95-808 | IT Project Management | 6 |
| Course Number | Course Title | Units |
| 95-720 | Information Security Project | 24 |
| 95-757 | Information Security Risk Policy & Management | 6 |
| 95-769 | Network Security Analysis | 12 |
| 94-818 | Policy Topics: Information Security Policy | 6 |
Featured Course: Introduction to Information Security Management
This course introduces you to material essential for effectively managing or consulting on an organization's computer and network security. Explore topics in: computer system vulnerabilities; effective cryptographic techniques and protocols; access control policies and mechanisms; and implications of security technology in the realm of risk management.
You'll learn how to design and implement computer security policies and standards, formulate disaster recovery plans, and analyze system security architectures and physical security controls. Additional material covers the legal aspects of computer system auditing in a secure environment, and how to structure the management of a site's computer security on a daily basis.