Combating IS Fraud: A Teaching Case Study

People are becoming more creative in use of classic fraud schemes via information systems. This paper presents a case study resource for teaching information security controls to help combat information systems fraud. The Health First Case Study is designed to give undergraduate computer science, information systems, and information technology students an opportunity to plan security for a doctor’s office, with the guidance of another useful resource, the Small Business Security Workbook. The case study addresses social engineering, ethics, requirements documentation, security design, incident response, and personnel security. Course implementation examples are included for both face-to-face and online courses