This course introduces the principles and practices of information system security and cyber security. Topics include common threats and attacking techniques, corresponding protection tools, cryptography, the development of security management policies, risk management, and personnel issues. Additional legal, ethical, and professional issues in information and cyber security will also be covered in this course.