Information Systems Audit and Control, M.S.I.S.A.C.

Print Degree Planner (opens a new window) |

Return to: 7110 Department of Computer Information Systems

Dr. Balasubramaniam Ramesh, Program Director, bramesh@gsu.edu

There is a continuing shortage of specialists with the combination of auditing and technology knowledge needed to properly inform and execute management decisions in areas such as IT Assurance, Information Security, IT Governance, and IT Risk Management. The purpose of the Master of Science in Information Systems Audit and Control (MSISAC) program is to produce graduates who are able to combine a thorough knowledge of auditing principles with an equally thorough knowledge of Information Technologies to enable organizations to competently operate in environments where auditing systems are tightly integrated with organizational information systems. Graduates will be well prepared for careers in IT auditing, but also for a variety of other areas such as auditing, information systems, consulting, and assurance.

Information Systems provide the basic fabric with which organizational management develop, record, and process abstractions and models that are both the basis of management strategy, decision making and of recording the flows of assets and liabilities within the organization and with its trading partners. Auditors are increasingly called upon to design, review, audit, and advise stakeholders with regard to the accuracy, timeliness and appropriateness of complex information systems. Developing competencies in IT audit often requires a broad understanding of enterprise-wide approaches for managing growing international risks and emerging regulations. IT auditors must know how to identify and mitigate information risks, effectively manage security-related incidents, and reduce the impact of these on people, profitability and property.

To summarize, the purpose of the Master of Science in Information Systems Audit and Control program is to produce graduates who are able to combine their knowledge of auditing with the latest information systems tools and techniques to enable organizations to achieve information assurance and security. MSISAC program graduates are expected to be academically prepared to take the CISA exam upon completion of their degree. This combination of skills necessary for obtaining these highly valued certifications is very rarely found in any program in the nation.

Degree Requirements

Regulations for the Degree

The regulations, policies, and procedures given in the “Master’s Enrollment” and “Master’s Programs” sections of this chapter apply to the MSISAC program. A maximum of six hours of transfer credit is permitted in this 30-hour program.
Course Requirements. The course requirements for the Master of Science in Information Systems Audit and Control degree and the format of the program follow. Consult the Course Descriptions chapter for prerequisites to the graduate courses listed below. For descriptions and prerequisites of the undergraduate foundation courses, see the Course Descriptions chapter of the Georgia State University Undergraduate and Graduate Catalogs. These catalogs are available on the web at www.gsu.edu; click on Students then University Catalogs.

Foundation Requirements

The required courses in this list are in addition to the 30 hours required for the degree. They are assigned as part of the admissions process based on a review of each student’s transcripts. They can be exempted if equivalent course work has been previously completed with grades of C or higher. An accepted applicant, who at the time of admission to the MSISAC program, has not completed the foundation and prerequisite courses, must complete these requirements in a manner approved by the MSISAC program coordinator.

ACCT 2101 - Principles of Accounting I
ACCT 2102 - Principles of Accounting II

Required Courses (30 Hours)

Required Graduate Courses (24 Hours)

CIS 8000 - Information Technology Project Management 3 Credit Hours
CIS 8085 - Information and Information Systems Security Risk Management 3 Credit Hours
CIS 8086 - Protecting Information Assets 3 Credit Hours
CIS 8394 - Advanced Topics in Cybersecurity 1 to 3 Credit Hours
CIS 8690 - Advanced Topics in Information Systems 3 Credit Hours
ACCT 8680 - Security and Privacy of Information and Information Systems 3 Credit Hours
or
CIS 8080 - Information Systems Security and Privacy 3 Credit Hours
CIS 8635 - IT Auditing 3 Credit Hours
or
ACCT 8630 - Information Technology Auditing 3 Credit Hours
CIS 8695 - Managing Big Data for Analytics 3 Credit Hours

Electives (6 Hours)

ACCT 8310 - Advanced Management Accounting Systems 3 Credit Hours and
ACCT 8740 - Seminar on Internal Auditing 3 Credit Hours
or
CIS 8672 - Integrated Process Platforms for Innovation 3 Credit Hours and
CIS 8674 - Customizing Enterprise Systems Platforms 3 Credit Hours