My time at the University of Louisville was very enduring, and a challenge. I have completed challenging courses that gave me classroom experience in my career field. This is the Coursework I have completed that displays what I learned in each class

---

Business and Systems Analysis

CIS 410

Management of Information Systems – CUE

In this course, I explored:

• Strategic development of information technology.
• How the value chain is analyzed and applied to information resource management.
• Planning for information systems.
• Organizing, staffing, and controlling development of IT.
• The development of an IT platform and it architecture that relates to organizational success.
• Analyzing an organization’s position based on Porter’s Five Forces and how it can affect an organization.
• How an Internet Enabled Business Model is able to contribute to how successful an organization can be.

CIS 320

System Analysis and Design

In this course, I explored:

• Processes of Information systems by which are understood, analyzed, and designed.
• Creating an information system deliverable that was used to conduct planning, analysis, and design activities.
• Understanding and using object-oriented modeling using unified Modeling Language (UML).
• Introducing and understanding iterative and incremental development.
• Develop problem solving and critical thinking skills as a systems analyst.
• Gain practical experience in discussion making in a group and as a member of an information systems development team.
• Develop client engagement and skills that are expected of a systems analyst.

Database Design and Applications

CIS 310

Database Design

In this course, I explored:

• The fundamentals of relational database design and implementation
• Entity relationship modeling concepts and techniques
• Basic features of the current version of SQL
• Design and implementation of data warehouses
• fundamentals of database administration
• Extensive coverage of E-R modeling
• Extensive coverage of the relational model, normalization, and SQL

CIS 300

Computer Information Systems

In this course, I explored:

• Functions of organizational information systems
• Roles that information systems play within organizations
• Collect, organize, and manipulate data that generates important information to make decisions
• Expand my knowledge of Microsoft Excel and Access software tools that businesses use
• Analyze and solve different types of business problems

CIS 420

Development Project

In this course, I explored:

• Participate in planning of information systems development activities, and to monitor and to report progress with respect to plan expectations;
• Apply iterative development techniques to design and to implement an information system;
• Design an information system using object-oriented modeling techniques;
• Demonstrate an understanding of system implementation practices, including topics such as design patterns, development frameworks, Platform-as-a-Service (PaaS), Software-as-a-service (SaaS), code versioning, software integration, and testing;
• Implement an information system in accordance with design models and standard practices;
• Apply systems technologies acquired in previous courses to the development of an information system;
• Refine written and oral communication skills;
• Take the initiative in developing a software solution and in contributing to/leading group activities: and
• Gain practical experience in group decision-making and in functioning as a member of an information systems development team.

CIS 483

Intro to Database Security

In this course, I explored:

• The fundamentals of database security, and concepts used in both SQL management studio, and Linux
• Understand access controls, and how they work in a database
• Develop and manage database architectures
• Getting familiar with laws that consider computer privacy
• Use alternatives to encrypt data that is stored
• Understanding commercial systems, and how they enforce security, and possible vulnerabilities that could potentially affect their systems

Programming Application

CIS 150

Fundamentals of Information Systems

In this course, I explored:

• Explain the Role and Impact of Technology in the Professional Business Community. Assess and identify critical knowledge and skill gaps related to core Business functions and IT functions. (LO1)
• Learn about methods of software development. Describe the tools and strategies critical to software development. Analyze the use of protective measures to safeguard computers and data. (LO2)
• Understand and Develop HTML through the creation of an HTML Document, understanding the Attributes and Elements and ability to link files within a website. (LO3)
• Work with browser developer tools to aid in the creation and maintenance of fully functioning website. Learn to use the most current CSS styles to create visually interesting pages and captivating graphical designs. (LO4)
• Learn about and develop JavaScript comments and code to insert an element into a web page design. Use JavaScript properties and methods and use browser debugging tools in developing your web pages. (LO5)

CIS 199

Software Development I

In this course, I explored:

• The fundamental concepts in computer programming
• Introduced with the basic features of C#, how it is laid out, and how it works. With an introduction to arrays, methods, classes, and control flow
• Introduced to Object-Oriented Programming concepts
• Explore the use of Graphical User Interface (GUI) programming in C#
• Using Visual Studio to create, edit, debug, and execute C# programs and applications

Business Communication & Writing

BUS 301

Business Communication

In this course, I explored:

• Crafting professional messages based on your communication goals (instrumental, relational, and identity) and the needs of your receivers.
• Identifying five core competencies of effective business communication (professional, clear, concise, evidence-driven, persuasive)
• Skillfully selecting and applying a variety of techniques for meeting each competency
• Research, organize, and deliver professional messages using appropriate communication channels

Information Security

CIS 481

Introduction to Information Security

In this course, I explored:

• Define information security
• Recount the history of computer security and how it evolved into information security
• Define key terms and critical concepts of information security
• List the phases of the security systems development life cycle
• Describe the information security roles of professionals within an organization
• Discuss the organizational business need for information security
• Explain why a successful information security program is the shared responsibility of an organization’s general management and IT management
• List and describe the threats posed to information security and common attacks associated with those threats
• Describe the relationship between threats and attacks against information within systems
• Describe the significance of attack timing in threat assessment
• Describe the functions of and relationships among laws, regulations, and professional organizations in information security
• Explain the differences between laws and ethics
• Identify major national laws and regulations that affect the practice of information security including:
  • Computer Security Act
  • Sarbanes–Oxley
  • Gramm–Leach–Bliley
  • COPPA/HIPAA/FERPA
  • USA Patriot Act
  • Americans with Disabilities Act, Section 508
  • FDA 21 CFR part 820/806
• Discuss the role of culture as it applies to ethics in information security
• Describe management’s role in the development, maintenance, and enforcement of information security policy, standards, practices, procedures, and guidelines
• Explain what an information security blueprint is, identify its major components, and explain how it supports the information security program
• Discuss how an organization institutionalizes its policies, standards, and practices using education, training, and awareness programs
• Explain the difference between Enterprise Information Security Policy (EISP), Issue-Specific Security Policy (ISSP), and Systems-Specific Security Policy (Sys-SP)
• Develop ISSP/Sys-SP plans for the protection of intellectual property, the implementation of access controls, and patch and change management
• Describe what contingency planning is and how it relates to incident response planning, disaster recovery planning, and business continuity plans
• Develop contingency plans for mock organizations of various sizes
• Define risk management, risk identification, and risk control
• Describe how risk is identified and assessed
• Assess risk based on probability of occurrence and likely impact
• Explain the fundamental aspects of documenting risk via the process of risk assessment
• Describe the various risk mitigation strategy options
• Identify the categories that can be used to classify controls including NIST 800-53
• Discuss conceptual frameworks for evaluating risk controls and formulate a cost-benefit analysis
• Discuss ways to document and manage exceptions
• Discuss the important role of access control in computer-based information systems, and identify and discuss widely used authentication factors
• Describe firewall technology and the various approaches to firewall implementation
• Identify the various approaches to control remote and dial-up access by authenticating and authorizing users
• Discuss content filtering technology
• Describe virtual private networks and discuss the technology that enables them
• Identify and describe the categories and models of intrusion detection and prevention systems
• Describe the detection approaches employed by modern intrusion detection and prevention systems
• Define and describe honeypots, honeynets, and padded cell systems
• List and define the major categories of scanning and analysis tools, and describe the specific tools used within each category
• Chronicle the most significant events and discoveries in the history of cryptology
• Explain the basic principles of cryptography including:
• common cryptographic uses (data protection, data integrity, authentication, non-repudiation)
• block vs stream
• symmetric cryptography
• asymmetric (public-key) cryptography
• hybrid cryptography (including Diffie-Hellman)
• hash functions and collision resistance
• digital signatures
• public key infrastructure
• digital certificates
• Describe the operating principles of the most popular cryptographic tools
• Awareness of federal cryptographic standards (including FIPS 140, 180, 186, 197, 198, and SP 800-32, and 800-38x)
• List and explicate the major protocols used for secure communications including:
• DES, Blowfish, Twofish, AES/Rijndael
• MD4, MD5, SHA-1, SHA-2, SHA-3
• RSA, ECC, ElGamal, DSA
• Describe common failures in cryptographic systems including:
• Types of attacks (brute force, chosen plaintext, known plaintext, differential and linear cryptanalysis, etc.)
• Implementation failures
• Discuss the relationship between information security and physical security
• Describe key physical security considerations, including fire control and surveillance systems
• Identify critical physical environment considerations for computing facilities, including uninterruptible power supplies
• Explain how an organization’s information security blueprint becomes a project plan
• Discuss the many organizational considerations that a project plan must address
• Explain the significance of the project manager’s role in the success of an information security project
• Describe the need for professional project management for complex projects
• Describe technical strategies and models for implementing a project plan
• List and discuss the nontechnical problems that organizations face in times of rapid change
• Describe where and how the information security function should be positioned within organizations
• Explain the issues and concerns related to staffing the information security function
• Enumerate the credentials that information security professionals can earn to gain recognition in the field
• Discuss how an organization’s employment policies and practices can support the information security effort
• Identify the special security precautions that must be taken when using contract workers
• Explain the need for separation of duties
• Describe the special requirements needed to ensure the privacy of personnel data
• Discuss the need for ongoing maintenance of the information security program
• List the recommended security management models
• Define a model for a full maintenance program
• Identify the key factors involved in monitoring the external and internal environment
• Describe how planning, risk assessment, vulnerability assessment, and remediation tie into information security maintenance
• Explain how to build readiness and review procedures into information security maintenance
• Discuss digital forensics, and describe how to manage it
• Describe the process of acquiring, analyzing, and maintaining potential evidentiary material
• Apply critical thinking skills to case analysis, security research paper summaries, and company security assessment