MGT 5155 Security in the Enterprise

Module: Introduction and Overview

Lecture: Introduction and Overview

Outcomes

 After completing this module, students should be able to:

• Understand the objectives of the class
• Understand the work expected from the student
• Understand the student evaluation process
• Understand the concept of the enterprise

Module: Information

Lecture: Information 

Outcomes

 After completing this module, students should be able to:

• Define information in the context of the enterprise
• Understand information classification methodologies
• Explain why classification of information is necessary

Module: Risk-Based Security

Lecture: Risk-Based Security

Outcomes

After completing this module, students should be able to:

• Understand the concept of risk
• Understand why risk management is the keystone of a security program
• Understand the continuous nature of risk assessment

Module: Frameworks

Lecture: Frameworks

Outcomes

After completing this module, students should be able to:

• Understand the various security frameworks 
• Understand which frameworks apply to a given enterprise
• Understand how the frameworks differ

Module: Legislation

Lecture: Legislation

Outcomes

After completing this module, students should be able to:

• Understand local, state, and federal cyber laws
• Understand the issues associated with cyberlegislation creation
• Understand the issues associated with cyber enforcement

Module: Legal Obligations

Lecture: Legal Obligations

Outcomes

After completing this module, students should be able to:

• Understand the term “best effort”
• Understand the term “industry standard”
• Understand contractual requirements
• Understand lawful and unlawful intercept

Module: Security Operations, Part 1

Lecture: Security Operations, Part 1

Outcomes

After completing this module, students should be able to:

• Explain asset management as it relates to security
• Explain configuration management
• Understand the concept of device hardening
• Understand how the security architecture is derived

Module: Security Operations, Part 2

Lecture: Security Operations, Part 2

Outcomes

After completing this module, students should be able to:

• Understand the elements of incident response
• Understand the concept of event management
• Understand the concept of continuous monitoring
• Understand the concept of computer forensics 

Module: Attack Models

Lecture: Attack Models

Outcomes

 After completing this module, students should be able to:

• Be able to explain red team/blue team exercises
• Understand flaw hypothesis testing
• Understand social engineering

Module: Security Testing

Lecture: Security Testing

Outcomes

 After completing this module, students should be able to:

• Understand the various types of security testing
• Understand when to perform security testing
• Understand when it is appropriate to have outside test resources 

Module: Human Factors

Lecture: Human Factors

Outcomes

After completing this module, students should be able to:

• Understand why security features are not used
• Understand the concept of transparency
• Understand how to be a helpful help desk