Management Information Systems (MIS)

  1. Securing Information Systems
    1. Information Security Threats and Vulnerabilities
      1. Types of Security Threats
        1. Malicious Software
          1. Computer Viruses
            1. Worms and Trojans
              1. Spyware and Adware
                1. Ransomware
                  1. Rootkits
                  2. Network-Based Attacks
                    1. Denial of Service Attacks
                      1. Distributed Denial of Service
                        1. Man-in-the-Middle Attacks
                          1. Packet Sniffing
                            1. IP Spoofing
                            2. Social Engineering Attacks
                              1. Phishing and Spear Phishing
                                1. Pretexting
                                  1. Baiting
                                    1. Tailgating
                                    2. Insider Threats
                                      1. Malicious Insiders
                                        1. Negligent Insiders
                                          1. Compromised Insiders
                                          2. Physical Security Threats
                                            1. Unauthorized Access
                                              1. Equipment Theft
                                                1. Environmental Hazards
                                              2. Vulnerability Assessment and Management
                                                1. Vulnerability Identification
                                                  1. Vulnerability Scanning Tools
                                                    1. Penetration Testing
                                                      1. Security Auditing
                                                    2. Security Management Framework
                                                      1. Information Security Governance
                                                        1. Security Policy Development
                                                          1. Security Standards and Procedures
                                                            1. Compliance Management
                                                              1. Security Awareness Training
                                                              2. Risk Management Process
                                                                1. Asset Identification and Valuation
                                                                  1. Threat Assessment
                                                                    1. Vulnerability Analysis
                                                                      1. Risk Calculation and Prioritization
                                                                        1. Risk Treatment Strategies
                                                                          1. Risk Acceptance
                                                                            1. Risk Avoidance
                                                                              1. Risk Mitigation
                                                                                1. Risk Transfer
                                                                            2. Security Technologies and Controls
                                                                              1. Access Control Systems
                                                                                1. Authentication Methods
                                                                                  1. Password-Based Authentication
                                                                                    1. Multi-Factor Authentication
                                                                                      1. Biometric Authentication
                                                                                        1. Token-Based Authentication
                                                                                        2. Authorization Mechanisms
                                                                                          1. Role-Based Access Control
                                                                                            1. Attribute-Based Access Control
                                                                                              1. Mandatory Access Control
                                                                                                1. Discretionary Access Control
                                                                                                2. Identity Management Systems
                                                                                                  1. Single Sign-On
                                                                                                    1. Directory Services
                                                                                                      1. Privileged Access Management
                                                                                                    2. Network Security Technologies
                                                                                                      1. Firewall Systems
                                                                                                        1. Packet Filtering Firewalls
                                                                                                          1. Stateful Inspection Firewalls
                                                                                                            1. Application Layer Firewalls
                                                                                                              1. Next-Generation Firewalls
                                                                                                              2. Intrusion Detection and Prevention
                                                                                                                1. Network-Based IDS/IPS
                                                                                                                  1. Host-Based IDS/IPS
                                                                                                                    1. Signature-Based Detection
                                                                                                                      1. Anomaly-Based Detection
                                                                                                                      2. Virtual Private Networks
                                                                                                                        1. VPN Protocols
                                                                                                                          1. Site-to-Site VPNs
                                                                                                                            1. Remote Access VPNs
                                                                                                                          2. Cryptographic Technologies
                                                                                                                            1. Encryption Fundamentals
                                                                                                                              1. Symmetric Encryption
                                                                                                                                1. Asymmetric Encryption
                                                                                                                                  1. Hash Functions
                                                                                                                                    1. Digital Signatures
                                                                                                                                    2. Public Key Infrastructure
                                                                                                                                      1. Certificate Authorities
                                                                                                                                        1. Digital Certificates
                                                                                                                                          1. Key Management
                                                                                                                                            1. Certificate Lifecycle Management
                                                                                                                                            2. Encryption Applications
                                                                                                                                              1. Data-at-Rest Encryption
                                                                                                                                                1. Data-in-Transit Encryption
                                                                                                                                                  1. Database Encryption
                                                                                                                                                    1. Email Encryption
                                                                                                                                                  2. Endpoint Security Solutions
                                                                                                                                                    1. Antivirus and Anti-Malware
                                                                                                                                                      1. Signature-Based Detection
                                                                                                                                                        1. Heuristic Analysis
                                                                                                                                                          1. Behavioral Analysis
                                                                                                                                                            1. Cloud-Based Security
                                                                                                                                                            2. Endpoint Detection and Response
                                                                                                                                                              1. Mobile Device Management
                                                                                                                                                                1. Data Loss Prevention
                                                                                                                                                              2. Business Continuity and Disaster Recovery
                                                                                                                                                                1. Business Continuity Planning
                                                                                                                                                                  1. Business Impact Analysis
                                                                                                                                                                    1. Recovery Time Objectives
                                                                                                                                                                      1. Recovery Point Objectives
                                                                                                                                                                        1. Continuity Strategies
                                                                                                                                                                        2. Disaster Recovery Planning
                                                                                                                                                                          1. Disaster Recovery Strategies
                                                                                                                                                                            1. Hot Site Recovery
                                                                                                                                                                              1. Warm Site Recovery
                                                                                                                                                                                1. Cold Site Recovery
                                                                                                                                                                                  1. Cloud-Based Recovery
                                                                                                                                                                                  2. Backup and Recovery Systems
                                                                                                                                                                                    1. Backup Types and Strategies
                                                                                                                                                                                      1. Backup Storage Options
                                                                                                                                                                                        1. Recovery Testing Procedures
                                                                                                                                                                                      2. Incident Response Management
                                                                                                                                                                                        1. Incident Response Planning
                                                                                                                                                                                          1. Incident Detection and Analysis
                                                                                                                                                                                            1. Containment and Eradication
                                                                                                                                                                                              1. Recovery and Post-Incident Activities
                                                                                                                                                                                              2. Security Monitoring and Auditing
                                                                                                                                                                                                1. Security Information and Event Management
                                                                                                                                                                                                  1. Log Management and Analysis
                                                                                                                                                                                                    1. Security Metrics and Reporting
                                                                                                                                                                                                      1. Compliance Auditing

                                                                                                                                                                                                  Previous

                                                                                                                                                                                                  6. Developing and Managing Information Systems

                                                                                                                                                                                                  Go to top

                                                                                                                                                                                                  Next

                                                                                                                                                                                                  8. Ethical and Social Issues in Information Systems