Course Syllabus

Back to Syllabus Search | Browse by Department

Southern Utah University

Fall Semester 2025

Information Assurance (Online)

CYBR 3750-30I

Course:	CYBR 3750-30I
Credits:	3
Term:	Fall Semester 2025
Department:	CSIS
CRN:	30400

Course Description

Information Assurance (IA) topics and techniques; the value of securing data, both for employees and for an organization. Local, state, and federal privacy policies and legislation; liability of individuals and institutions related to data confidentiality and integrity. Covers risk management, security policies, and common threats and countermeasures, as well as best practices for information assurance in industry. Students will be prepared to sit for the Certified Information Systems Security Professional certification exam. (Fall) [Graded (Standard Letter)] Prerequisite(s): CYBR 2750 - Prerequisite Min. Grade: C-

Required Texts

Mike Chapple, James Stewart, Darril Gibson, CISSP Certified Information Systems Security Professional Study Guide, Eighth Edition, Sybex Publications, ISBN 9781119475934

Omar Santos, Developing Cyber Security Programs and Policies, 3rd edition, Prentice Hall, ISBN 9780789759405

Learning Outcomes

Upon successful completion of this course, the student will be able to:
* Explain Information Assurance concepts and how it has evolved
• Explain how security risks are identified and mitigated
• Apply business practices and standards to develop a security plan
• Describe legal, ethical, and privacy issues in computer security

Course Requirements

To succeed in this course, the student must (1) view all classes of instruction and/or actively observe all electronically published instructional presentations, (2) work on the deliverables outside of scheduled class times, for a minimum of 90 hours that are typically required for a 3-credit course, and (3) focus on mastering the student learning outcomes published for this course.

Course Outline

Week 01:

How to write policies

Assignment - SUU Commenced Attendance Quiz

Extra Point work – Discussion Question (5 points)

Extra Point work – Entrance Quiz (10 points)

Extra Point work – Plagiarism Quiz (10 points)

Extra Point work – Class Work Agreement (10 points)

Week 02 – Unit 01:

Policy Book - Chapter 1 - Understanding Cybersecurity Policies and Governance

CISSP Book – Chapter 1 - Security Governance Through Principles and Policies

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – IS threats (10 points)

Assignment – Exercise Lab – Find a company the students wish to create a security policy (10 points)

Assignment – Exercise Lab – Consequences of breaking security policies (15 points)

Week 03 – Unit 02a:

Policy Book - Chapter 2 – Cybersecurity Policy Organization, Format, and Styles

Policy Book - Chapter 4 – Governance and Risk Management

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – National Strategy on Cyberspace (10 points)

Assignment – Exercise Lab – Company Policy on Organizational Security (30 points)

Week 04 – Unit 02b:

CISSP Book – Chapter 4 – Laws, Regulations, and Compliance

CISSP Book – Chapter 8 – Principles of Security Modules, Designs, and Capabilities

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – FERPA (10 points)

Assignment – Exercise Lab – SDLC (30 points)

Week 05 – Unit 03a:

Policy Book - Chapter 3 – Cybersecurity Framework

Policy Book - Chapter 16 – NIST Cybersecurity Framework

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – ISO (10 points)

Assignment – Exercise Lab – Personal Security (30 points)

Week 06 – Unit 03b:

CISSP Book – Chapter 2 – Personal Security and Risk Management Concepts

CISSP Book – Chapter 9 – Security Vulnerabilities, Threats, and Countermeasures

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – Industry Cybersecurity Programs (10 points)

Assignment – Exercise Lab – Physical and Environmental Security (30 points)

Week 07 – Unite 04a:

Policy Book - Chapter 5 – Asset Management and Data Loss Prevention

Policy Book - Chapter 7 – Physical and Environmental Security

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – SANS (10 points)

Assignment – Exercise Lab – Asset Classification and Control (30 points)

Week 08 – Unit 04b:

CISSP Book – Chapter 5 – Protecting Security of Assets

CISSP Book – Chapter 10 – Physical Security Requirements

CISSP Book – Chapter 15 – Security Assessment and Testing

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – NIST (10 points)

Assignment – Exercise Lab – System Development and Maintenance (30 points)

Week 09 – Unit 05a:

Policy Book - Chapter 8 – Communications and Operations Security

Policy Book - Chapter 9 – Access Control Management

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – Media and Data destruction (10 points)

Assignment – Exercise Lab – Access Control (30 points)

Week 10 – Unit 05b:

CISSP Book – Chapter 11 – Secure Network Architecture

CISSP Book – Chapter 12 – Secure Communications and Network Attacks

CISSP Book – Chapter 14 – Controlling and Monitoring Access

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – Single factor vs Multiple factor authentication (10 points)

Assignment – Exercise Lab – Communications and Operations Management (30 points)

Week 11 – Unit 06a:

Policy Book - Chapter 6 – Human Resource Security

Policy Book - Chapter 10 – IS Acquisition, Development, and Maintenance

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project- Employment (10 points)

Assignment – Exercise Lab – Security Architecture (30 points)

Week 12 – Unit 06b:

CISSP Book – Chapter 16 – Managing Security Operations

CISSP Book – Chapter 19 – Investigation and Ethics

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – Insecure code and applications (10 points)

Assignment – Exercise Lab – Application Security (30 points)

Week 13 – Unit 07a:

Policy Book - Chapter 11 – Cybersecurity Incident Response

Policy Book - Chapter 12 – COOP and DR

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Research Project – Example incident response plans (10 points)

Assignment – Exercise Lab – Business Continuity Management (30 points)

Week 14 – Unit 07b:

CISSP Book – Chapter 3 – COOP

CISSP Book – Chapter 17 – Preventing Incidents

CISSP Book – Chapter 18 – Responding to Incidents

Assignment – Discussion Question (5 points)

Assignment – Open Book Quiz from Publisher (student can take only once) (10 points)

Assignment – Exercise Lab – Compliance (30 points)

Assignment – Final Project (200 points

Extra Point work – Exit Quiz (10 points)

Extra Point work – LinkED-In Creation (5 points

Week 15:

Final Exams (200 points) Student can be exempt from the final exams if they have 895 points after the final project

Instructor's policies on late assignments and/or makeup work

DELIVERABLES:

No deliverable will be accepted late for any reason. At the discretion of the Professor, with extreme documented circumstances, a deliverable may be accepted late. Any deliverable accepted late will, maximally, only be worth half of its original point value.

DUE DATES and COMPLETION DATES:

If the Due date is September 19 and the Completion date would then be seven days later on September 26. This provides an additional week for any [personal issues rather than going through a lot of resets. There is no penalty for using the completion date for submittals. With that said, if you, the student, are used to submitting assignments on completion dates, at Mid-Term and Class completion time frames the Due Dates and Completion Dates are the same date for those weeks!

CALCULATION OF GRADES:

NOTE: This class is worth 1000 points!!!

To calculate a student grade, take the total points as shown and divide by 10. This score will be the final grade based upon the grading scale for this class.

GRADE CURVING/EXTRA WORK POLICY:

No grades are curved. There are 50 extra points available for any student to earn. No other extra points are awarded.

Attendance Policy

This is a 100% online course. It is the student's responsibility for all deliverables and the dates. All lectures have been recorded and posted as well as the labs. The Professor is always available for any questions and will hold an optional weekly class meeting.

Course Fees

There is a fee of $20.25 for this course.

ADA Statement

Students with medical, psychological, learning, or other disabilities desiring academic adjustments, accommodations, or auxiliary aids will need to contact the Disability Resource Center, located in Room 206F of the Sharwan Smith Center or by phone at (435) 865-8042. The Disability Resource Center determines eligibility for and authorizes the provision of services.

If your instructor requires attendance, you may need to seek an ADA accommodation to request an exception to this attendance policy. Please contact the Disability Resource Center to determine what, if any, ADA accommodations are reasonable and appropriate.

Academic Credit

According to the federal definition of a Carnegie credit hour: A credit hour of work is the equivalent of approximately 60 minutes of class time or independent study work. A minimum of 45 hours of work by each student is required for each unit of credit. Credit is earned only when course requirements are met. One (1) credit hour is equivalent to 15 contact hours of lecture, discussion, testing, evaluation, or seminar, as well as 30 hours of student homework. An equivalent amount of work is expected for laboratory work, internships, practica, studio, and other academic work leading to the awarding of credit hours. Credit granted for individual courses, labs, or studio classes ranges from 0.5 to 15 credit hours per semester.

Academic Freedom

SUU is operated for the common good of the greater community it serves. The common good depends upon the free search for truth and its free exposition. Academic Freedom is the right of faculty to study, discuss, investigate, teach, and publish. Academic Freedom is essential to these purposes and applies to both teaching and research.

Academic Freedom in the realm of teaching is fundamental for the protection of the rights of the faculty member and of you, the student, with respect to the free pursuit of learning and discovery. Faculty members possess the right to full freedom in the classroom in discussing their subjects. They may present any controversial material relevant to their courses and their intended learning outcomes, but they shall take care not to introduce into their teaching controversial materials which have no relation to the subject being taught or the intended learning outcomes for the course.

As such, students enrolled in any course at SUU may encounter topics, perspectives, and ideas that are unfamiliar or controversial, with the educational intent of providing a meaningful learning environment that fosters your growth and development. These parameters related to Academic Freedom are included in SUU Policy 6.6.

Academic Misconduct

Scholastic honesty is expected of all students. Dishonesty will not be tolerated and will be prosecuted to the fullest extent (see SUU Policy 6.33). You are expected to have read and understood the current SUU student conduct code (SUU Policy 11.2) regarding student responsibilities and rights, the intellectual property policy (SUU Policy 5.52), information about procedures, and what constitutes acceptable behavior.

Please Note: The use of websites or services that sell essays is a violation of these policies; likewise, the use of websites or services that provide answers to assignments, quizzes, or tests is also a violation of these policies. Regarding the use of Generative Artificial Intelligence (AI), you should check with your individual course instructor.

Emergency Management Statement

In case of an emergency, the University's Emergency Notification System (ENS) will be activated. Students are encouraged to maintain updated contact information using the link on the homepage of the mySUU portal. In addition, students are encouraged to familiarize themselves with the Emergency Response Protocols posted in each classroom. Detailed information about the University's emergency management plan can be found at https://www.suu.edu/emergency.

HEOA Compliance Statement

For a full set of Higher Education Opportunity Act (HEOA) compliance statements, please visit https://www.suu.edu/heoa. The sharing of copyrighted material through peer-to-peer (P2P) file sharing, except as provided under U.S. copyright law, is prohibited by law; additional information can be found at https://my.suu.edu/help/article/1096/heoa-compliance-plan.

You are also expected to comply with policies regarding intellectual property (SUU Policy 5.52) and copyright (SUU Policy 5.54).

Mandatory Reporting

University policy (SUU Policy 5.60) requires instructors to report disclosures received from students that indicate they have been subjected to sexual misconduct/harassment. The University defines sexual harassment consistent with Federal Regulations (34 C.F.R. Part 106, Subpart D) to include quid pro quo, hostile environment harassment, sexual assault, dating violence, domestic violence, and stalking. When students communicate this information to an instructor in-person, by email, or within writing assignments, the instructor will report that to the Title IX Coordinator to ensure students receive support from the Title IX Office. A reporting form is available at https://cm.maxient.com/reportingform.php?SouthernUtahUniv

Non-Discrimination Statement

SUU is committed to fostering an inclusive community of lifelong learners and believes our university's encompassing of different views, beliefs, and identities makes us stronger, more innovative, and better prepared for the global society.

SUU does not discriminate on the basis of race, religion, color, national origin, citizenship, sex (including sex discrimination and sexual harassment), sexual orientation, gender identity, age, ancestry, disability status, pregnancy, pregnancy-related conditions, genetic information, military status, veteran status, or other bases protected by applicable law in employment, treatment, admission, access to educational programs and activities, or other University benefits or services.

SUU strives to cultivate a campus environment that encourages freedom of expression from diverse viewpoints. We encourage all to dialogue within a spirit of respect, civility, and decency.

For additional information on non-discrimination, please see SUU Policy 5.27 and/or visit https://www.suu.edu/nondiscrimination.

Pregnancy

Students who are or become pregnant during this course may receive reasonable modifications to facilitate continued access and participation in the course. Pregnancy and related conditions are broadly defined to include pregnancy, childbirth, termination of pregnancy, lactation, related medical conditions, and recovery. To obtain reasonable modifications, please make a request to title9@suu.edu. To learn more visit: https://www.suu.edu/titleix/pregnancy.html.

Disclaimer Statement

Information contained in this syllabus, other than the grading, late assignments, makeup work, and attendance policies, may be subject to change with advance notice, as deemed appropriate by the instructor.

Username
Tnumber
Pidm