Cybersecurity Risk Analysis & Management

Catalog description

This course covers cybersecurity risk analysis and management for information systems. Topics include: threat modeling and analysis; quantitative and qualitative risk assessment; vulnerabilities, threats, witted adversaries, exploits, and mitigations; asset and inventory management; impact analysis, business continuity planning, and disaster recovery planning. Emphasis is placed in risk management analysis and its implications on IT infrastructures and compliance. Students will demonstrate effective application of the three pillars of confidentiality, integrity, and availability using threat modeling, risk assessment and mitigation as a basis for cybersecurity risk management planning in various simulated or real environments.