This programme has been designed to provide specialized knowledge in security management. As organizations continue to deploy mission critical network centric information systems, managing the security of such systems will become more critical. The challenge is as much about securing networks, communications, data and applications as it is about awareness of best practices on what is to be done and how it is to be integrated to the organizations operating environment and enterprise architecture. Therefore, from the perspective of organization, an understanding of how information security can be managed at organizational level keeping in mind the major information security standards (such as ISO 27001) and the legal provisions (such as IT ACT, 2000;2008) is important. This course is designed to provide a comprehensive framework for planning, analyzing and managing information security to suit to the differing requirements at individual and organizational level. This program also covers the major cyber crime incidents, discusses how they happened (the techniques/ methods used, motivation), and the learning’s from such incidents.