Its 350 Wk01_04_2017

+

Go!

ITS 350 Week One

This post is intended for students in my ITS 350 Introduction to Computer Security course at Colorado State University. The majority of information related to the course is available within the course online, but I try to provide additional material like this week in order to bring my own experiences / web surfings / questions about the subject out into the open without diluting what the school has prepared in terms of course materials. In other words, I'm trying not to muck up the course shell.

the obligatory course overview

This course provides foundational knowledge of the essential elements of network security and equips students with the skills and knowledge required to support IT security, planning, and cryptology in organizational settings.

Students learn about various technologies available to keep digital assets secure as well as the physical security methods that are components of a comprehensive secure solution. Upon successful completion of the course students will have the ability to evaluate organizational needs to secure digital assets and to design, propose, and implement, solutions that minimize exposure to the many internal and external security risks that organizations face in the 21st century workplace. The course also prepares students for the CompTIA Security+ and TestOut Security Pro certifications

what is the point of taking this course?

For some people information security is just another part of their job. It should be like that with more of us, actually, but if it is routine then you're in great shape. Not everyone is in this position, however, and there are good reasons to take a college class in IT security even if you think you know what you're doing.

  • You may not, in fact, know what you think you know. Generally speaking any college class should challenge your assumptions at least a little bit.
  • It helps to clarify the language so you can speak about security intelligently AND HELPFULLY with others. Security is a tough and tense subject for some, and it is immensely harder when not everyone is using the same language. And language matters.
  • The content of this course specifically covers material that industry-wide topics that security professionals must master. It uses Testout as a training tool to engage students in detailed material related to this subject.

why am I teaching this course?

Over the years I have worked in a wide range of IT-related roles, including multimedia design, desktop support, printer monkey, system administrator, manager, and now developer. I find that security is a subject that every field would benefit having a stronger understanding of (that's a really awkward sentence, but you get it, right?) We need this, and when I chose to pursue a second Master's degree I concentrated my studies on the Information Security and Assurance field so that I could expand my own understanding of not only industry best practices, but also the direction that research is going.

So I like this subject, and I like sharing it with my friends in the IT field. We're all trying to make technology into a useful, not scary thing for our co-workers / customers / clients / bosses, and knowing this stuff well helps to do that.