This course studies the principles of information security management. The course content is compatible with current industrial standard in information security (e.g. CISSP certification). The students will also learn the current topics and issues in information security management. On completion of the course, students should be able to (1) understand the principles of information security management; (2) acquire the knowledge equivalent to current industrial standard in information security (e.g. CISSP certification); and (3) identify practical information security principles and guidelines with the consideration of legal and privacy issues.