Study of the theory and practice of risk management in secure systems and networks. The course will focus on the current tools and best practices available in mitigating system vulnerabilities and the accepted methodologies for managing residual risks. Topics include operational security, risk reduction techniques, auditing of information systems, and effective long-term risk monitoring approaches. An emphasis will be placed on current issues and future directions in managing risks, and research opportunities for students in this field.