CYBS 6345 Course Learning Outcomes: Securing the Digital World

• Describe and explain the key components of IT Systems
• Explore the seven domains of a typical IT infrastructure through a hands-on lab
• Research and present the details of an actual cyber breach case, vulnerabilities exploited and recommend cybersecurity controls to reduce the risk
• Discuss and explain the specifics of confidentiality, integrity and availability
• Complete hands-on labs on authentication and authorization access
  
  

CYBS 6350: Cryptology and Data Protection

• Construct the elements of a cryptographic system
• Compare symmetric and asymmetric algorithms
• Evaluate which cryptographic protocols, tools, and techniques are appropriate for a given situation
• Assess cryptographic weaknesses, failures, and implementation issues
• Appraise the pros and cons of real-world cryptographic applications
• Describe each type of service/model of cloud computing
• Compare and contrast local resource requirements, local control, network requirements, and security (attacks, mitigations, overall vulnerability)
  
  

CYBS 6355 Governance, Risk and Compliance 

• Conduct privacy and compliance assessments, including Privacy Impact Assessments
• (PIAs), to identify privacy risks, legal obligations, and appropriate safeguards
• Research and analyze GRC state laws as they relate to privacy
• Evaluate and communicate cybersecurity, privacy, and compliance requirements to management and other organizational stakeholders
• Analyze organizational cybersecurity and privacy policies to determine their alignment with applicable legal, regulatory, and industry requirements
• Evaluate various tasks within the work role of the Privacy Compliance Manager
• Apply ethical principles and professional judgement when evaluating compliance decisions
• Complete a risk assessment lab pertaining to the collection, use, storage and protection of organization data
  
  

CYBS 7350: Identify and Access Management Controls and Strategies:

• Identify the bad actors in cyberspace and compare their resources, capabilities/techniques, motivations and aversion to risk
• Describe different types of attacks and their characteristics Describe system attacks and the actors that perform them
• Describe cyber defense tools, methods and components and apply cyber defense methods to prepare a system to repel attacks
• Analyze common security failures and identify system design principles that have been violated
• Given an actual cyber breach, identify the design principles involved or needed to defend an organization
• Understand the interaction between security and system usability and the importance for minimizing the effects of security mechanisms
• Analyze and report system security posture trends
• Ensure cybersecurity controls reduce identified risk to an acceptable level
• Assess adequate access controls based on principles of least privilege and need to know
  
  

CYBS 7355 - Penetration Testing and Vulnerability Assessment

• Students should be able to plan, organize and perform penetration testing on a simple network
• Describe, for a given OS, the steps necessary for hardening the OS with respect to various applications
• Securely install a given OS, remove or shut down unnecessary components and services, close unnecessary ports, and ensure that all patches and updates are applied
• Apply tools and techniques for identifying vulnerabilities
• Create and apply a vulnerability map of a system
• Apply techniques to trace a vulnerability to its root cause
• Propose and analyze countermeasures to mitigate vulnerabilities
• Explain the circumstances under which a vulnerability must be disclosed
• Explain how ethical foundations are applied to situations arising from the interconnected world
• Examine diverse ethical dilemmas
• Describe the role of cybersecurity in supporting and encouraging ethics, as well as where cybersecurity practices can cause ethical conflicts
• Describe the methodologies used in network forensics, digital forensics, and media forensics
  
  

CYBS 7357 – Network Security Architecture

• Describe the key concepts in network defense (defense in depth, minimizing exposure, etc.)
• Describe the fundamental concepts, technologies, components and issues related to communications and data networks
• Design a basic network architecture given a specific need and set of hosts/clients (
• Track and identify the packets involved in a simple TCP connection (or a trace of such a connection)
• Use network monitoring tools to observe the flow of packets (e.g., Wireshark)
• Perform network mapping (enumeration and identification of network components) (e.g., Nmap)
• Describe common network vulnerabilities
• Analyze problems, recommend solutions, products, and technologies to meet business objectives
• Recommend best security practices to achieve stated business objectives based on risk assumptions
• Actively protect information technology assets and infrastructure from external and internal threats
• Monitor systems for anomalies, proper updating, and patching
• Assist in incident responses for any breaches, intrusions, or theft
• Evaluate and perform planning, testing, and implementation of software and hardware deployed
• Analyze how security policies are implemented on systems to protect a network
• Explain how network defense tools (firewalls, IDS, etc.) are used to defend against attacks and mitigate vulnerabilities
  
  

CYBS 7396 Strategic Cybersecurity Planning for Enterprise

• Analyze cybersecurity leadership responsibilities and priorities from the perspectives of the DCWF Executive Cyber Leader (Work Role 901), Executive Officer (CEO), and Chief Information Security Office (CISO) in government and business organizations. 
• Design an organizational cybersecurity function that defines leadership roles, governance responsibilities, reporting relationships, vulnerabilities, risks, and risk assessment responsibilities within the scope of the Executive Cyber Leader
• Explain and apply strategic planning and policy-development processes used by CISOs and other executive leaders to establish organizational priorities, define strategic direction, allocate resources, and identify the programs and infrastructure required to achieve cybersecurity objectives
• Develop cybersecurity policies and recommend policy changes that support organizational initiatives, address identified risks and facilitate required operational or technological improvements
• Develop an organizational cybersecurity strategy and comprehensive cybersecurity plan for a government department or small- to medium-sized business
• Design a cybersecurity awareness program that includes appropriate objectives, themes, communication methods, implementation activities, and measures of effectiveness
• Develop a business continuity and disaster recovery plan that supports organizational resilience, protects critical operations and resources, and establishes appropriate recovery priorities and procedures
• Evaluate and manage organizational cybersecurity implications involving strategy personnel, infrastructure, policy enforcement, emergency planning, security awareness, and other resources within the CISO’s or Executive Cyber Leader’s areas of responsibility
• Create, present, and defend executive level cybersecurity projects during synchronous class sessions using appropriate evidence, professional communication, and reasoned responses to questions and recommendations