CIS120A — Cybersecurity Fundamentals, Part 1

Topics Covered in Course

• Define information security.
• Discuss the history of computer security and explain how it evolved into information security.
• Define key terms and critical concepts of information security.

• Describe the information security roles of professionals within an organization.
• Discuss the need for information security.
• Explain why a successful information security program is the shared responsibility of the entire organization.
• List and describe the threats posed to information security and common attacks associated with those threats.
• List the common information security issues that result from poor software development efforts.
• Describe the different management functions with respect to information security.
• Define information security governance and list the expectations of the organization’s senior management with respect to it.
• Describe management’s role in the development, maintenance, and enforcement of information security policy, standards, practices, procedures, and guidelines.
• List the elements in an effective security education, training, and awareness program and describe a methodology for effectively implementing security policy in the organization.
• Explain what an information security blueprint is, identify its major components, and explain how it supports the information security program.
• Explain the risk management framework and process model, including major components.
• Discuss the history of computer security and explain how it evolved into information security.
• Define risk appetite and explain how it relates to residual risk.
• Describe how risk is identified and documented.
• Discuss how risk is assessed based on likelihood and impact.
• Describe various options for a risk treatment strategy.
• Discuss conceptual frameworks for evaluating risk controls and formulating a cost-benefit analysis.
• Compare and contrast the dominant risk management methodologies.
• Discuss the need for contingency planning.
• Describe the major components of incident response, disaster recovery, and business continuity.
• Identify the processes used in digital forensics investigations.
• Define the components of crisis management.
• Discuss how the organization would prepare and execute a test of contingency plans.
• Explain the differences between laws and ethics.
• Describe the relevant laws, regulations, and professional organizations of importance to information security.
• Identify major national and international laws that affect the practice of information security.
• Discuss the role of privacy as it applies to law and ethics in information security.
• Explain the roles of some U.S. law enforcement agencies with an interest in information security.
• Describe where and how the information security function should be positioned within organizations.
• Explain the issues and concerns related to staffing the information security function.
• List and describe the credentials that information security professionals can earn to gain recognition in the field.
• Discuss how an organization’s employment policies and practices can support the information security effort.
• Identify special security controls and privacy considerations for personnel management.