Keep Cyber Simple!

Explore risk as the likelihood of a threat exploiting a vulnerability to impact valued assets, and learn how vulnerabilities, threats, threat agents, exposure, and countermeasures shape cybersecurity.

Review cybersecurity fundamentals and risk management with the CI triad, access control models (mandatory, discretionary, role-based), and account provisioning and management.

Explore access attacks in cyber security fundamentals, showing how attackers exploit vulnerabilities via social engineering, phishing, and reconnaissance using tools like whois, nslookup, and packet sniffers.

Explore how input, processing, output, and storage power a secure, layered computer design with hardware, the OS model, virtualization, and data protection.

Review computer hardware, memory and storage, operating systems, virtualization, and cloud service models (software as a service, platform as a service, infrastructure as a service) with OSI and TCP/IP concepts.

Explore how cyber security policy guides risk assessment and information categorization by confidentiality, integrity, and availability, to selecting and continuously monitoring controls under the risk management framework.

Identify external and internal cybersecurity roles and responsibilities, from authorized officials to information system security officers, and explain how they collaborate to assess risks, authorize operations, and maintain security documentation.

This module introduces six-step risk management framework, covering categorization, selecting controls, implementing controls, and explains risk as the likelihood of a threat exploiting a vulnerability with business impacts.

This lecture maps the six-step risk management framework to a home computer scenario, teaching categorization, choosing and implementing controls to protect confidentiality, integrity, and availability of family information.