Enterprise Risk Management Graduate Certificate

This overview course examines the management issues involved with assessing the security and risk environments in both the private and public sectors in order to assure continuous system-wide operations. The course studies the elements of operational and technological risk assessment and operational continuity using a project management framework and quantitative risk metrics. Students are exposed to the role of the firm in crisis response and management as well as the terms, systems, and interactions necessary to assure continuous operations. Topics include: the role and need for comprehensive assurance strategy and planning; information security; an overview of the system-wide structure; the social and emotional impact on the workforce as well as its effect on productivity; and the organizational infrastructure relating to national, regional, and international compliance.   [ 4 cr. ]

This course examines emergency management from national, state, local, and family perspectives of prevention, preparedness, response, and recovery. The course encompasses knowledge of the specific agencies, organizations, and individual behaviors in emergency management as well as the interlinking partnerships between/among these groups. Areas of discussion include: responsibilities at federal, state, community and individual levels; guidelines and procedures for operations and compliance such as the National response Plan; Incident Command Systems (ICS); exercises; plan development, command, and control; communication; partnership development and maintenance; leadership; and numerous other elements related to effective emergency management. The unique and critical roles of private and public partnerships are reviewed and particular attention is paid to the interplay and interdependency among national, state, community, business (public and private), and the individual. 4cr. *Prereq: MET AD610  [ 4 cr. ]

Students are exposed to the important issues relating to corporate and organizational security and risk from both the perspective of systems designed to protect against disasters and aspects of emergency preparedness should systems fail. Engineering science is applied to security areas that include information technology, terrorism, and other organization disruptions. Students study proactive risk assessment through analytical risk analysis techniques and simulations. Students will be able to design a company or agency global assurance plan, organize the strategy to make the plan operational, and implement control measures to assess the plan's degree of success. The course also provides explanations of legal/regulatory, auditing, and industry- specific requirements related to compliance, control, and reporting issue sin business risk management. The role of establishing and maintaining standards by local, national, and international agencies is discussed, as is the importance of these agencies in certifying operations. *Prereq: MET AD610  [ 4 cr. ]

This course takes concepts covered in MET AD617 and applies them in more detail mainly to the corporate-private sector environment. During this course, we will first review the organization and processes necessary to effectively respond to and manage incidents, including the transition from emergency response and incident management to business recovery. The course will focus on disaster recovery, an absolutely essential but sometimes overlooked component of any successful corporate recovery program. Here, the emphasis is on technology recovery. This includes reviewing the key components of the IT infrastructure; how these components are accounted for in the response and recovery processes; and some best practices in technology recovery modelling. Several emerging technologies relative to cloud computing, information security, etc., are also examined. Prereq: MET AD617  [ 4 cr. ]

The course presents, assesses, and discusses the contemporary theories, methods and practices related to business continuity (BC), business continuity management (BCM) and resiliency planning. The course incorporates the underpinnings of enterprise-wide risk management (ERM); however, it is designed to focus on broad-based threats, vulnerabilities, unexpected events, emergencies, and crises that may impacts organizations and their leaders and professionals. The course focuses on the design, development and applications of resilience, emergency planning, crisis management, BC, and disaster recovery used by organizations in the private sector. It presents a comprehensive, cutting-edge technologies pertaining BCM in complex organizations and challenging environments. Technological innovations are used to involve a complex array of high-level developments that result in transitions and transformations of businesses. Finally, the environmental considerations center on connections between business and the natural law.   [ 4 cr. ]

Focuses on how leading organizations manage a wide array of technology-related threats and vulnerabilities, ranging from routine outages and operational errors to infrastructure breakdowns and systems failures - right up to significant data breaches, denial of service and ransomware attacks. Principles of technology resilience and its role within the organizational enterprise risk management structure are reviewed, the technology risk landscape is evaluated, the importance of governance and compliance are reinforced, and the infrastructure and processes necessary for organizations to effectively manage technology- related incidents are examined. The course includes how enterprises transition from incident management to technology recovery, and how leading companies design and implement cybersecurity and privacy programs. Prerequisite: MET AD 610.  [ 4 cr. ]