An overview of information systems security function. Threats, attacks and security technology measures. Legal, ethical and professional issues. Risk assessment and management. Planning for security.