An examination of current standards of due care and best business practices in Information Security with a focus on evaluation and selection of optimal security posture. Students explore evaluation of security models, risk assessment, threat analysis, organizational technology evaluation, security implementation, disaster recovery planning and security policy formulation and implementation.