Discussion 13 - Enterprise Risk Management - Initial post
School of Computer and Information Sciences
COURSE SYLLABUS
Course Information
ITS835 - M52 Enterprise Risk Management
Fall 2020 Full Term
Course Format: Hybrid
CRN: 12065
Class Time and Location: F 08:00 AM - 10:00 PM
Instructor Information
Name: Omar Mohamed
Email: [email protected]
Phone: 4694658231
Office Location: Virtual
Office Hours/Preferred Contact Times: By Appointment
Course Description
This course goes beyond looking at risk management from the confines of quantitative
topics to cover the full spectrum of risks that may emerge in enterprises. It covers a
more holistic approach that includes the decisions and actions of employees in an active
enterprise. It uses case studies to demonstrate the issues and challenges in total risk
management. Finally, the course explore techniques for balancing enterprise risk and
reward to enable performance optimization.
Course Objectives
Upon completion of this course:
Students will be able to provide a rigorous business case for both business and
mitigation risk-reward decision-making
Students will be able to design and implement an appropriate ERM framework
and risk governance structure customized to any type of organization.
Students will be able to quantify all types of risks, including strategic,
operational, financial, and insurance
Students will be able to conduct qualitative risk assessments to identify/prioritize
key risks from among all risk sources.
Students will be able to develop a clear definition of risk appetite (the aggregate
enterprise-level risk limit).
Students will be able to assure the board of directors that key risks are well
understood and managed
Students will be able to understand and satisfy ERM requirements from rating
agencies, regulators, and shareholders
Learner Outcomes
Learn how to perform research identifying and analyzing technological
challenges
Build critical thinking skills to develop and apply solutions that achieve strategic
and tactical IT-business alignment
Develop professional skills and expertise to advance knowledge in your chosen
field or discipline within information technology
Conduct research with professional and ethical integrity
Address complex technical questions and challenge established knowledge and
practices in the area
Identify, comprehend, analyze, evaluate and synthesize research
Communicate effectively and employ constructive professional and interpersonal
skills
Critically evaluate current research and best practices
Demonstrate IT leadership skills at the team and enterprise levels following
tenets of professional, social, and ethical responsibility
Recommend IT strategies that support enterprise mission and objectives
Course Website
Access to the course website is required via the iLearn portal on the University of the
Cumberlands website: http://www.ucumberlands.edu/ilearn/
or https://ucumberlands.blackboard.com/
Required Books and Resources
Title: Academic Writer
Website: http://ucumberlands.libguides.com/c.php?g=504168
About: This is APA's resource for APA format, style, citations, and document types (like
how to write a literature review). UC has a dedicated link for students to create their
Academic Writer account, and that link can be found here
Course Required text can be found and purchased via the UC Barnes and Noble
Bookstore: https://cumber.bncollege.com/shop/cumberlands/page/find-textbooks
Suggested Books and Resources
Writing Center
Website: https://www.ucumberlands.edu/learningcommons/writingcenter
About: This website includes beginning information about the Writing Center. Look for
The Learning Commons in your class list in iLearn. Once you open The Learning
Commons "course", look for the Writing Center on the left menu bar
Writing Center
Subtitle: This website includes beginning information about the Writing Center. Look for
The Learning Commons in your class list in iLearn. Once you open The Learning
Commons "course", look for the Writing Center on the left menu bar.
Publisher: https://www.ucumberlands.edu/learningcommons/writingcenter
Academic Writer
Website: http://ucumberlands.libguides.com/c.php?g=504168
About: This is APA's resource for APA format, style, citations, and document types (like
how to write a literature review). UC has a dedicated link for students to create their
Academic Writer account, and that link can be found here
Academic Writer
Subtitle: This is APA's resource for APA format, style, citations, and document types (like
how to write a literature review). UC has a dedicated link for students to create their
Academic Writer account, and that link can be found here
Publisher: http://ucumberlands.libguides.com/c.php?g=504168
The Learning Commons (TLC)
Website: http://ucumberlands.libguides.com/c.php?g=504168
About: TLC is here to help you succeed in your courses, from your first day at
Cumberlands through completing your degree.TLC offers a variety of academic
resources both virtually and in-person that are informal and with qualified Academic
Fellows.
The Learning Commons (TLC)
Subtitle: The Learning Commons (TLC) is here to help you succeed in your courses, from
your first day at Cumberlands through completing your degree.TLC offers a variety of
academic resources both virtually and in-person that are informal and with qualified
Academic Fellows. ucumberlands.libguides.com
Publisher: http://ucumberlands.libguides.com/c.php?g=504168
Grammarly
Website: https://www.grammarly.com/
About: Compose bold, clear, mistake-free writing with Grammarly’s AI-powered writing
assistant
Zotero
Subtitle: Zotero is a free, easy-to-use tool to help you collect, organize, cite, and share
research.
Publisher: https://www.zotero.org/
Zotero
Website: https://www.zotero.org/
About: Zotero is a great, easy to use reference management tool, and it's free
Grammarly
Subtitle: Compose bold, clear, mistake-free writing with Grammarly’s AI-powered writing
assistant
Publisher: https://www.grammarly.com/
Requirements and Policies
Academic Integrity/Plagiarism
At a Christian liberal arts university committed to the pursuit of truth and
understanding, any act of academic dishonesty is especially distressing and cannot be
tolerated. In general, academic dishonesty involves the abuse and misuse of
information or people to gain an undeserved academic advantage or evaluation. The
common forms of academic dishonesty include:
Cheating – using deception in the taking of tests or the preparation of written
work, using unauthorized materials, copying another person’s work with or without
consent, or assisting another in such activities.
Lying – falsifying, fabricating, or forging information in either written, spoken, or
video presentations.
Plagiarism—using the published writings, data, interpretations, or ideas of another
without proper documentation
Plagiarism includes copying and pasting material from the internet into
assignments without properly citing the source of the material.
Episodes of academic dishonesty are reported to the Vice President for Academic
Affairs. The potential penalty for academic dishonesty includes a failing grade on a
particular assignment, a failing grade for the entire course, or charges against the
student with the appropriate disciplinary body.
Participation Policy
Study after study has linked successful academic performance with good class
participation. Those who assume positions of responsibility must “show up” in order to
be effective. Therefore, students are expected to actively participate in intelligent
discussion of assigned topics in all areas (Discussion Board Activities, Synchronous
Sessions, Forums, Shared Papers, etc.) to help process course material and/or to
demonstrate understanding of course content. Point adjustments will be taken for non-
participation
Disability Accommodations
University of the Cumberlands accepts students with certified disabilities and provides
reasonable accommodations for their certified needs in the classroom, in housing, in
food service or in other areas. For accommodations to be awarded, a student must
submit a completed Accommodations Application form and provide documentation of
the disability to the Disability Services Coordinator (Mr. Jacob Ratliff, Boswell Campus
Center, Student Services Office Suite, [email protected]). When all
paperwork is on file, a meeting between the student and the Coordinator will be
arranged to discuss possible accommodations before accommodations are formally
approved. Students must then meet with the Coordinator at the beginning of each
semester before any academic accommodations can be certified for that term.
Certifications for other accommodations are normally reviewed annually.
Academic Appeal
Both undergraduate and graduate students have the right to challenge a grade. If
discussions with the course instructor and department chair do not lead to a satisfactory
conclusion, students may file a formal written appeal with the Vice President for
Academic Affairs, who will forward the appeal to the chair of the Academic Appeals
Committee. This formal written appeal must be filed by the end of the 4th week of
classes in the next regular term following the term in which the course in question was
taken. The Academic Appeals Committee then gathers information from the student, the
instructor, and any other relevant parties. The Committee will deliver its
recommendation on the complaint to the Vice President for Academic Affairs. After
reviewing this recommendation and concurring or amending it, the Vice President for
Academic Affairs will inform the student and instructor of the disposition of the
complaint no later than the last day of classes of the term in which the complaint was
filed. Records of all actions regarding academic grade appeals, including their final
disposition, are maintained by the Vice President for Academic Affairs and the Academic
Appeals Committee. (Undergraduate Catalog/Graduate Catalog)
Student Responsibilities
Students should:
Use University of the Cumberlands email system for all academic, administrative,
and co-curricular communication between faculty, staff and peers.
Check for email and class announcements using iLearn (primary) and University of
the Cumberlands webmail (secondary) daily.
Demonstrate Cumberlands Character in and outside the classroom per the
University Mission & Vision
Ensure you have consistent required technology for the course
Participate in courses regularly to:
Find announcements and updates
Complete assignments on time. Keep in mind that all deadlines use Eastern
Standard Time (EST).
Engage in discussion
Connect with fellow students and faculty
Present written work in an academic and professional manner.
Take examinations on the designated dates and times. Students should make
arrangements with faculty before the designated date for any needed
accommodations.
Contact faculty or student success coordinator with questions or concerns.
Course Policies
The only authorized electronic means of academic, administrative, and co-curricular
communication between University of the Cumberlands and its students is through the
UCumberlands email system (i.e. Webmail). Each student is responsible for monitoring
his/her University email account frequently. This is the primary email account used to
correspond with you directly by the University; imperative program information is sent
to this email account specifically from campus and program office.
• Students should check for e-mail and class announcements using iLearn (primary) and
University of the Cumberlands webmail (secondary).
• Students are expected to find out class assignments for missed classes and make up
missed work.
• Students are expected to find out if any changes have been made in the class or
assignment schedule.
• Written work must be presented in a professional manner. Work that is not submitted
in a professional manner will not be evaluated and will be returned as unacceptable.
o There is a craft to writing. Spelling, grammar, punctuation and diction (word usage)
are all tools of that craft. Writing at the collegiate level will show careful attention to
these elements of craft. Work that does not exhibit care with regard to these
elements will be considered as inadequate for college writing and graded accordingly.
• Students are expected to take the examinations on the designated dates. If you are
unable to take the exam on the scheduled date and know in advance, you are to make
arrangements with your professor before the designated date. If you miss the exam,
you must have a legitimate reason as determined by your professor.
Recognizing that a large part of professional life is meeting deadlines, it is necessary to
develop time management and organizational skills. Failure to meet the course
deadlines may result in penalties. Keep in mind that all deadlines are set using Eastern
Standard Time (EST). Late assignments will NOT be accepted.
Students are expected to:
Review any assigned reading material and prepare responses to homework
assigned.
Actively participate in activities, assignments, and discussions.
Evaluate and react to each other’s work in a supportive, constructive manner.
Complete specific assignments and exams when specified and in a professional
manner.
Utilize learned technologies for class assignments.
Connect content knowledge from core courses to practical training placement and
activities.
Links to Support
UC Academic Catalog: https://www.ucumberlands.edu/academics/academic-catalog
UC Student Handbook: https://www.ucumberlands.edu/student-handbook
Academic Resources & Writing Center: www.ucumberlands.edu/learningcommons
Library: http://www.ucumberlands.edu/library/
Bookstore: https://cumber.bncollege.com/shop/cumberlands/home
About University of the Cumberlands:
https://www.ucumberlands.edu/about/presidents-welcome
Course Evaluation
Graded work will receive a numeric score reflecting the quality of performance. Relative
weights assigned to graded work are as follows:
For a 16 week course
Weekly Research Papers (Weeks 4, 6, 8, 10, 12) 10% (100 points = 20
points per paper)
Weekly Discussions (weeks 1, 3, 5, 7, 9, 11, 13) 17.5% (175 points = 25
points per discussion)
Residency Weekend Project (Paper and Presentation) 50% (500 points)
Practical Connection Activity (residency weekend) 10% (100 points)
Final Portfolio Project/Research Paper (week 15) 10% (100 points)
Reflective Activity Discussion (week 16) 2.5% (25 points)
Total = 1,000 points
For a 8 week course
Weekly Research Papers (Weeks 2, 3, 4, 5, 6, ) 10% (500 points = 100
points per paper)
Weekly Discussions (weeks 1, 2, 3, 4, 5, 6, 7 ) 17.5% (175 points = 25
points per discussion)
Practical Connection Activity 10% (100 points)
Final Portfolio Project/Research Paper (week 7 ) 20% (200 points)
Reflective Activity Discussion (week 8 ) 2.5% (25 points)
Grading Scale
Graded work will receive a numeric score reflecting the quality of performance as
given above in evaluation methods. The overall course grade will be determined
according to the following scale:
A= 90 – 100 (90% - 100%)
B= 80 – 89 (80% - 89%)
C = 70 – 79 (70% - 79%)
F < 69 (Below 69%)
Course Schedule
Course Weekly
Schedule Reading/Topics
Assignments and Due
Dates
Weekly
Unit
Readings/Topics Assignments and Due
Dates
1
Risk Management and Enterprise Risk Management
Beasley, M. S. (2016). What is Enterprise Risk Management? Retrieved from
https://erm.ncsu.edu/az/erm/i/chan/library/What_is_Enterprise_Risk_Management.pdf
In
Di
W
*F
in
in
fro
Ac
Pl
*M
pl
w
D
11
Ti
2
Risk Management and Enterprise Risk Management
Hopkin, P. (2017). Fundamentals of Risk Management:
Understanding, Evaluating and Implementing Effective Risk
Management (Vol. Fourth Edition). New York: Kogan Pages 96-103.
( Part Two, Section 08 Enterprise Risk Management )
http://search.ebscohost.com/login.aspx?
direct=true&AuthType=shib&db=e000xna&AN=1446715&site=eds-
live&custid=s8501869&groupid=main&profile=eds_new
Practice
compiling an
Annotated
Bibliography
3
Integrating ERM with Strategy
Do, H., Railwaywalla, M., & Thayer, J. (2016). Integration of ERM with Strategy (p. 35).
Retrieved from Poole College of Management, NCSU website:
https://erm.ncsu.edu/az/erm/i/chan/library/Integration_of_ERM_and_Strategy_Case_Stud
4
Integrating ERM with Strategy
Enterprise Risk Management Integrating with
Strategy and Performance Executive Summary.
(2017, June). Retrieved from
https://www.coso.org/Documents/2017-COSO-
ERM-Integrating-with-Strategy-and-Performance-
Executive-Summary.pdf
Week 4 Research Paper
Due: Sunday night
11:59 PM Eastern
5
Required Residency Session
Risk Management Frameworks
Lopes, M., Guarda, T. & Oliveira, P. (2019). How
ISO 27001 Can Help Achieve GDPR Compliance.
2019 14th Iberian Conference on Information
Systems and Technologies (CISTI), pp. 1-6.
https://ieeexplore.ieee.org/document/8760937?
arnumber=8760937
Week 5 Discussion
Residency Project
(Paper and
Presentation)
Practical
Connection
Activity – 500-
word personal
paper
Due: As posted
6
Risk Management Frameworks
Al-Ahmad, W., & Mohammad, B. (2013). Addressing Information
Security Risks by Adopting Standards. International Journal of
Information Security Science, 2(2), 28–43.
http://search.ebscohost.com/login.aspx?
direct=true&AuthType=shib&db=a9h&AN=93598603&site=eds-
live
Week 6
Research
Paper
Due: Sunday
night 11:59
PM Eastern
7
Risk Management Frameworks and
Assessment
Mackita, M., Shin, S.-Y., & Choe, T.-Y. (2019).
ERMOCTAVE: A Risk Management Framework
for IT Systems Which Adopt Cloud Computing.
Future Internet, 11(9), 195. Retrieved from
https://doi.org/10.3390/fi11090195
Week 7 Discussion
Due: Sunday night
11:59 PM Eastern
8
Risk Management Frameworks and
Assessment
Puchley, T., & Toppi, C. (2018). ERM:
Evolving from Risk Assessment to
Strategic Risk Management. HFM
(Healthcare Financial Management), 1–5
Week 8 Research
Paper
Due: Sunday night
11:59 PM Eastern
9
Risk Management Forensics
Chen, J. & Zhu, Q. (2019). Interdependent
Strategic Security Risk Management with
Bounded Rationality in the Internet of Things.
IEEE Transactions on Information Forensics and
Security, 14(11), 2958-2971.
Borek, A. (2014). Total Information Risk
Management: Maximizing the Value of Data and
Information Assets (Vol. First edition).
Amsterdam: Morgan Kaufmann
Discussion – Week 9
Due: Sunday night
11:59 PM Eastern Time
10
Risk Management Forensics
Hou, J., Li, Y., Yu, J. & Shi, W. (2020). A Survey on
Digital Forensics in Internet of Things IEEE
Internet of Things Journal, I(1),1-15,.
Week 10 Research Paper
Due: Sunday night
11:59 PM Eastern Time
11
Digital Forensics
Montasari, R., & Hill, R. (2019). Next-Generation
Digital Forensics: Challenges and Future
Paradigms. 2019 IEEE 12th International
Conference on Global Security, Safety and
Sustainability (ICGS3), Global Security, Safety
and Sustainability (ICGS3), 205.
https://doi.org/10.1109/ICGS3.2019.8688020
Sahinoglu, M., Stockton, S., Barclay, R. M., &
Morton, S. (2016). Metrics Based Risk
Assessment and Management of Digital
Forensics. Defense Acquisition Research Journal:
A Publication of the Defense Acquisition
University, 23(2), 152–177.
https://doi.org/10.22594/dau.16-748.23.02
Discussion – Week 11
Due: Sunday night
11:59 PM Eastern Time
12
Digital Forensics
Nnoli, H. Lindskog, D, Zavarsky, P., Aghili, S., &
Ruhl, R. (2012). The Governance of Corporate
Forensics Using COBIT, NIST and Increased
Automated Forensic Approaches, 2012
International Conference on Privacy, Security,
Risk and Trust and 2012 International
Conference on Social Computing, Amsterdam,
734-741.
Week 12 Research Paper
Due: Sunday night
11:59 PM Eastern Time
13
IRB
Implementing Regulatory Broad Consent Under
the Revised Common Rule: Clarifying Key Points
and the Need for Evidence. (2019). Journal of
Law, Medicine & Ethics, 47(2), 213–231.
https://doi.org/10.1177/1073110519857277
Discussion – Week 13
Due: Sunday night
11:59 PM Eastern Time
14
IT Governance and IT Risk Management
Practices
Vincent, N. E., Higgs, J. L., & Pinsker, R. E.
(2017). IT Governance and the Maturity of IT
Risk Management Practices. Journal of
Information Systems, 31(1), 59–77.
https://doi.org/10.2308/isys-51365
Final Research Project
Draft
15
Risk Inventory
Etges, A. P. B. da S., Grenon, V., Lu, M., Cardoso,
R. B., de Souza, J. S., Kliemann Neto, F. J., &
Felix, E. A. (2018). Development of an
enterprise risk inventory for healthcare. BMC
Health Services Research, 18(1), N.PAG.
https://doi.org/10.1186/s12913-018-3400-7
Final Research Project Due
Due: Sunday night
11:59 PM Eastern Time
16
The Future of ERM
Schiller, F., & Prpich, G. (2014). Learning to
organise risk management in organisations:
what future for enterprise risk management?
Journal of Risk Research, 17(8), 999–1017.
https://doi.org/10.1080/13669877.2013.841725
*SHORT WEEK,
Check with instructor for last day of
class and last day to submit
assignment
Week 16 Discussion
Syllabus Disclaimer
This syllabus contains important information critical to your success in this course. It
includes guidelines for this course and the instructor’s current expectations about
content, schedule, and requirements necessary for each student to achieve the best
educational results. While you must review and become familiar with the contents of
this syllabus, the instructor reserves the right to make adjustments or change in the
syllabus from time to time. Any changes to the syllabus will be discussed with the
students.