The Corporate Information Security Certificate is an interdisciplinary program. Coverage includes inspection and protection of information assets, risk analysis, controls and management, threat detection and reaction, incident handling procedures, technical and managerial responses and an overview of the information security planning and staffing functions. The Internet has opened many opportunities for organizations, however, it has also facilitated new and growing threats to corporate information assets. Internally, employee actions either deliberate or through negligence can now cause more damage in a networked environment than ever before. In addition, corporate information handling procedures are now under much greater scrutiny by regulatory bodies especially in the medical and financial sectors. This has been fueled by such laws as Sarbanes-Oxley, HIPAA and Gramm-Leach-Bliley. Therefore, corporate information security professionals require a wide range of knowledge and skills such as the need to know the laws and regulations governing privacy, to identify and assess information risks and vulnerabilities, to implement cost effective controls to mitigate these risks, to know how to apply policies and procedures that protect information assets, and to evaluate and deploy technologies that defend information assets from attack.