Programs by Campus


Cybersecurity Risk Management

Kelley School of Business; Maurer School of Law; Luddy School of Informatics, Computing, and Engineering; University Graduate School

Departmental E-mail:

Departmental URL:

(Please note that when conferring University Graduate School degrees, minors, certificates, and sub-plans, The University Graduate School’s staff use those requirements contained only in The University Graduate School Bulletin.)



Degrees Offered

The Master of Science (M.S.) in Cybersecurity Risk Management is offered in collaboration between the Kelley School of Business, Maurer School of Law, Luddy School of Informatics, Computing, and Engineering, and University Graduate School.

Master of Science in Cybersecurity Risk Management


All students must:

  1. Successfully complete 30 credit hours in graduate-level work based on the following requirements.
  2. Successfully complete CSCI-A 542 Technical Foundations of Cybersecurity.
  3. Successfully complete 6 credits in the Experiential Learning Component.
  4. Successfully complete 6 credit hours from each partner school (Kelley School of Business; Luddy School of Informatics, Computing, and Engineering; Maurer School of Law).
  5. Satisfy Cybersecurity Electives requirement. 

Luddy School of Informatics, Computing, and Engineering/Technical Cybersecurity – minimum six credits required

  • CSCI-A 541 Computing and Technology Bootcamp (Students with an undergraduate computer science or computer technology minor or major may not apply CSCI-A 541 to MS in Cybersecurity Risk Management degree requirements.)
  • CSCI-A 542 Technical Foundations of Cybersecurity (All students must take CSCI-A 542 Technical Foundations of Cybersecurity.)
  • CSCI-B 649 Topics in Systems
    • Topic should be a security or privacy topic. Examples include Data Driven Security & Privacy, and Security & Applied Crypto, and Usable Security & Privacy
  • ENGR-E 599 Topics in Intelligent Systems Engineering
    • Topic: Reverse Engineering Embedded Systems
  • INFO-I 520 Security and Software Assurance (Prerequisite: CSCI-A 542 or equivalent knowledge)
  • INFO-I 521 Malware Threat & Defense (Prerequisite: INFO-I 520. Same as CSCI-B 546.)
  • INFO-I 525 Organizational Informatics & Economics of Security
  • INFO-I 533 Systems and Protocol Security & Information Assurance (Prerequisite: INFO-I 520 or equivalent knowledge)
  • INFO-I 537 Legal & Social Informatics of Security (Prerequisite: basic scripting and/or programming knowledge)
  • INFO-I 538 Introduction to Cryptography (Prerequisites: strong mathematical background required along with basic programming/scripting. Same as CSCI-B 504.)
  • INFO-I 539 Cryptographic Protocols (Prerequisites: strong mathematical background required along with basic programming/scripting)
  • CSCI-A 590/CSCI-B 590/DSCI-D 590/INFO-I 590 Topics
    • Topic must be related to cybersecurity and chosen in consultation with the program director. May only apply to elective requirement.

Kelley School of Business/Information Technology Risk Management – minimum six credits required

  • BUEX-C 533 Data Intelligence & Visualization (Prerequisite: successful completion of a college-level database course in which data model—ERD, relational model, etc.—and SQL were taught OR at least one year experience designing database models or querying data using SQL)
  • BUEX-C 541 Enterprise Systems
  • BUEX-T 510 Digital Enterprise Business Technologies
  • BUEX-T 514 Business Capabilities for the Digital Future
  • BUKD-C 522 IT Technology for Managers
  • BUKD-C 548 Managing Intellectual Property in Global Business
  • BUKD-S 575 Business Applications of Machine Learning
  • BUKD-T 560 IT Risk Management
  • BUKD-T 579 Information Systems Security
  • BUKD-T 578 Cybersecurity Law & Policy OR BUS-L 578 Cybersecurity Law & Policy (1.5 cr.)
  • BUKD-T 501 Big Data Technologies (Prerequisite: BUEX-C 533)
  • BUKD-T 522 IT Architecture

Maurer School of Law/Cybersecurity Law and Policy – minimum six credits required

  • LAW-B 504 Intro to Law (audit or 1 cr.) (MS students without prior introduction to American legal system, legal reasoning, and foundational subjects in American law are required to enroll in LAW-B 504.)
  • LAW-B 536 Health Privacy Law (2 cr.)
  • LAW-B 587 Cybersecurity Law I
  • LAW-B 655 Information Privacy Practicum (Prerequisite: LAW-B 708 or LAW-B 728 or LAW-B 587 or LAW-B 738)
    • Selected topics: security, privacy, or technology
  • LAW-B 661 Law & Biomedical Advance
  • LAW-B 708 Information Privacy Law I
  • LAW-B 728 Information Privacy Law II
  • LAW-B 738 Cybersecurity Law II
  • LAW-B 764 Topics in Law & Technology
    • Examples include Space & Cyber Governance and Law & Technology Survey
  • LAW-L 730 Seminar in Intellectual Property Data Law & Policy
  • LAW-L 764 Seminar in Law & Technology

Experiential Learning Component – minimum six credits required. 

  • BUS-L 589 Cybersecurity Capstone (Cross-listed with LAW-B 655 for MS/JD students)
  • CSCI-B 649 Topic: Cyber Defense Competitions
  • GRAD-C 516 Cybersecurity Clinic (Cross-listed with LAW-B 710 for MS/JD students)
  • GRAD-C 540 Cybersecurity Internship
  • INFO-I 590 Hacking for Defense/Innovation for Impact
  • LAW-B 551 Intellectual Property Externship (Or equivalent law school externship relating to cybersecurity. Externship must be approved by CyberRiskMS faculty chair before credits can apply to degree requirements.) (JD/MS students only)

Cybersecurity Electives – minimum six credits required

6 credit hours chosen from the above courses.  Options may include other cybersecurity-related courses or complementary courses as chosen in consultation with the program director.


Students may earn concentrations in “Artificial Intelligence,” “Business,” “Computing,” or “Law” by selecting electives accordingly.

The Business, Computing, and Law concentrations require a total of fifteen credits from the respective course list above.

The Computing concentration requires students to satisfactorily complete CSCI-A 542, INFO-I 520, and INFO-I 533.

The Artificial Intelligence concentration requires students to satisfactorily complete an artificial intelligence project in the Cybersecurity Clinic (GRAD-C 516/LAW-B 710) in addition to twelve credits from the following course list: BUEX-T 510, BUEX-T 514, BUKD-S 575, CSCI-B 505, CSCI-B 551, CSCI-B 555, CSCI-B 561, CSCI-B 565, CSCI-B 657, CSCI-B 659, and CSCI-P 556.

Academic Bulletins

PDF Version

Click here for the PDF version.