Introduction to Cybersecurity Risk and Protection Strategies

Catalog description

This course focuses on cyber risks faced by individuals and organizations, and protection mechanisms to mitigate these risks. Examples are used to demonstrate risks posed by data at rest, data in use, and data in transit. This course will cover statistical models of risk, different risk assessment strategies (including the NIST 800 series) and methods of protecting information systems and data from unauthorized access and use. The strengths and limitation of protection mechanisms will be discussed, and will include access control, encryption, credentialing, operational policies and procedures, and risk mitigation policies (e.g., password update policy, least privilege). Students will get hands on experience on risk assessment and protection mechanisms.