University of Maryland Global Campus

INFA 610: Foundations of Information Security and Assurance

A guide to UMGC's INFA 610, the first graduate course in information assurance, covering security controls, risk, cryptography and access control.

Updated October 2026 · 5 min read

INFA 610 at the University of Maryland Global Campus (UMGC) is a 3-credit graduate overview of techniques for ensuring and managing information security. UMGC says it is to be taken as the first course in the program.

Topics include administrative and technical controls to prevent, detect, respond to and recover from cyber attacks, risk and vulnerability analysis to select controls, security planning, architecture, evaluation and assessment, and legal, ethical and privacy aspects.

Students find the breadth the main difficulty: you must connect technical, managerial and legal ideas.

Course at a Glance

ItemDetails
UniversityUniversity of Maryland Global Campus
Course codeINFA 610
Credits3
LevelGraduate
PlacementTo be taken as the first course in the program (per UMGC)
Subject areaInformation security and assurance

What INFA 610 Covers

Topic (from UMGC)What it means
Administrative and technical controlsPolicies and technologies to prevent, detect, respond to and recover from attacks
Risk and vulnerability analysisFinding weaknesses and choosing controls in proportion
Security planning and architectureDesigning how security fits the organization
Evaluation and assessmentChecking that controls work
Legal, ethical and privacy aspectsObligations and responsible practice
Cryptography, authentication, access controlCore techniques used at network, operating system, database and application layers

Key Concepts Explained

Risk-Based Selection of Controls

Controls cost money and effort, so they are chosen by risk. Identify the asset, the threat, the vulnerability and the likely impact, then choose a control that reduces risk to an acceptable level.

Illustration (invented): A customer database is the asset. A threat is unauthorised access. A vulnerability is weak password policy. Controls include stronger authentication (technical) and a review of access rights (administrative). Your analysis would rate the risk before and after and justify the extra cost.

Prevent, Detect, Respond, Recover

A balanced program uses all four. Preventive controls reduce the chance of an incident, detective controls find it, response limits damage and recovery restores operations.

Cryptography and Access Control

Encryption protects confidentiality and, with other techniques, integrity. Authentication verifies identity and access control decides what that identity may do. Explain what each protects and where it applies.

Typical Assignments and How to Approach Them

Follow your section's rubric. Work in this course typically includes the following.

Assignment typeWhat it testsHow to approach it
Risk analysisLinking assets, threats and controlsUse a table and explain the ratings
Controls comparisonUnderstanding trade-offsCompare cost, strength and fit
Security plan or policy sectionsPlanningState scope, roles and measurable requirements
DiscussionsApplying conceptsUse a specific incident or scenario

Writing a Risk-Based Analysis

Many INFA 610 tasks ask you to justify controls. A table plus a short narrative is usually the clearest way to present that reasoning.

  1. Identify the assets and what makes them valuable.
  2. List threats and vulnerabilities for each asset.
  3. Rate the risk and explain the rating.
  4. Select preventive, detective, response and recovery controls.
  5. Reassess the risk after the controls and discuss residual risk.

Discuss legal, ethical and privacy aspects where the scenario involves personal data. That shows the breadth the course description asks for.

Where Students Get Stuck

Study Tips for INFA 610

Checklist Before You Submit

CheckWhy it matters
Each control links to a specific riskControls are chosen by risk
Prevent, detect, respond and recover are all consideredBalanced programs need all four
Privacy and legal aspects are addressedThey are named in the catalog
Standards and sources are citedGraduate work needs authority

Ask whether residual risk is stated, so the reader knows what is left after your controls.

How We Help with INFA 610

Send the prompt, rubric and readings. A writer can prepare a model risk analysis, explain controls, or edit your draft. We never help bypass security or provide guidance for attacking real systems.

GradeEssays is independent of UMGC. Our work is a study and reference aid; use it to learn, then complete and submit your own work under UMGC's academic integrity policy. Orders are written from scratch, include free revisions within the scope of your original request, and are refunded in full if late.

Get Your INFA 610 Paper Reviewed

Share the assignment and rubric. We prepare a custom analysis or give feedback on your own draft.

Start My INFA 610 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

What does INFA 610 cover?

UMGC describes security controls, risk and vulnerability analysis, planning, architecture, assessment, legal and ethical aspects, and techniques such as cryptography and access control.

Is INFA 610 the first course in the program?

UMGC says it is to be taken as the first course.

Is it graduate level?

Yes.

What is risk-based control selection?

Choosing controls in proportion to asset value, threat and vulnerability.

Does it cover privacy and ethics?

Yes, the description includes legal, ethical and privacy aspects.

Will GradeEssays complete my assignment for submission?

No. We offer custom answers, editing and feedback as study support, and you submit your own work.