This course provides some basic economics backgrounds and gives an overview of the emerging security and economics literature. A good portion of the course focuses on strategies, policies, and managerial tactics to safeguard an organization against potential cyber-attacks. Topics include principles of information security management, information assurance, threat-vulnerability analysis, risk management, auditing, disaster recovery, and business continuity planning. The course covers also basic financial analysis and risk assessment techniques that are necessary to implement security and privacy programs in enterprises.