This course aims to identify, assess and evaluate risk to enable the execution of the enterprise risk management strategy; develop and implement risk responses to ensure that risk factors and events are addressed in a cost-effective manner and in line with business objectives; monitor risk and communicate information to the relevant stakeholders to ensure the continued effectiveness of the enterprise’s risk management strategy; design and implement information systems controls in alignment with the organization’s risk appetite and tolerance levels to support business objectives; monitor and maintain information systems controls to ensure they function effectively and efficiently; and achieve professional qualification as Certified in Risk and Information Systems Control (CRISC).

This course examines the fundamental concepts that comprise the information system (IS) functions in business and society, with emphasis on systems analysis & design. Together, we will study, discuss, analyze, and perform various exercises that bring into focus the myriad issues related to this most important field of study that affects virtually all aspects of business and society. Drawing from classroom and on hands assignments, students will be better able to understand the numerous technical, managerial, regulatory, and social issues associated with identifying and analyzing requirements for subsequent development of information-based systems. These assignments will highlight the methodologies and modeling techniques that have evolved since the introduction of the computer to the business function, making possible the overall objective of deploying robust and efficient information systems.