DEVELOPING INFORMATION RISK MANAGEMENT, SECURITY AND ASSURANCE CURRICULA FOR AIS/MIS/IT EDUCATION
Issues in Information Systems · 2006
Successful organizations of the 21 st Century have to deal proactively with information security issues.The demand for information security literacy is increasing rapidly, spurred in part because of increased regulatory requirements such as the Sarbanes-Oxley Act.In order to help meet this demand, Management Information Systems and Accounting departments in universities need to develop courses and perhaps even curricula to educate students about the strategic, managerial, organizational and regulatory issues of security in addition to the technical details.One interesting development in information security is the increasing demand for IT auditors from among non-accounting graduates (such as MIS majors).In our ongoing research (partly based on discussions with practitioners), we are working on the development of new courses at the graduate and undergraduate levels to support these demands.In this continuing research-in-progress paper, we describe the development of the demand for MIS students for information risk, security consulting and IT auditing careers and what we are doing at our university to make students more aware of such careers and to better prepare them for entry-level positions.Specifically we discuss courses being taught to graduate students in our Master of Accountancy program and undergraduate students in the MIS major and minor programs.We review sources of possible class assignments and exercises and also discuss the Information Systems Audit and Control Association's Model Curriculum.