Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Selection and Implementation of Security Controls

Name: Selection and Implementation of Security Controls
Rating: 4.4 (9 reviews)

Selection and Implementation of Cybersecurity Risks Controls

Created byRichea Perry

Last updated 9/2024

English

English [Auto],

What you'll learn

Student will learn how to holistically apply a 360 degree approach to the selection and implementation of security risks control measures
Key considerations for the identification, selection & implementation of security controls
High-level process of selecting controls to protect\ address idenitfied security risks on ecommerce web server
The role of governance in the effective selection and implementation of cybersecurity controls
Selecting and implementing cybersecurity controls based on the NIST Cybersecurity Framework (CSF)

Course content

4 sections • 33 lectures • 3h 6m total length

Introduction1:54
1b-Course Intro- The Case at hand1:37
2-About the course2:39
3-Meet your Instructor-Mentor2:05
4-Course Roadmap2:24
5-Approach to Control Selection_ pt11:53
Explore a flexible, comprehensive approach to identifying, assessing, selecting and implementing cyber security risk controls to safeguard digital assets and infrastructure after a breach.
6-Approach to Control Selection_ pt27:27
7-Applying same approach to real Data Breaches at a high-level3:31
8-Introduction to security controls7:07
9-Key considerations for the identification- selection & implementation of contr8:29
10-Risk Assessment-BIA, Control Selection, Cost Benefit Analysis7:42
11-Cost Benefit Analysis associated with controls selection6:55
12- Technology integration, operational impact, continuous monitoring, employee4:35
13-Regulatory Compliance, Incident Response Planning4:54

14-High-level process of selecting controls to protect ecommerce web server-Pt16:11
Identify data assets and threats, assess risk, and select and implement cybersecurity controls on an ecommerce web server, using WAF, IPS, vulnerability scanners, and incident response.
14-High-level process of selecting controls to protect ecommerce web server-Pt20:36
15-Steps involved in assessing the identified cyber risks in web server5:28
16-Identify assets, identify threats, identify vulnerabilities5:53
17-Determine likelihood, Impact, Calculate risk9:01
Learn to determine likelihood and impact for web server cyber risks using open source tools, vulnerability data, and threat intelligence, then calculate risk with a risk matrix and impact categories.
18- Documenting Cybersecurity Risk Assessment Report-Pt15:41
Document a cybersecurity risk assessment by compiling a comprehensive, living document that covers executive summary, assets, threats, vulnerabilities, likelihood, impact, risk level, and pragmatic mitigation strategies for a web server.
18-Documenting Cybersecurity Risk Assessment Report-Pt26:56
19- The role of governance in the effective selection and implementation of cybe12:11
Governance shapes policy, risk assessment, and resource allocation to enable effective selection and implementation of cyber security controls, aligning with business goals and ensuring compliance.
20-Why not implement frameworks that already have recommended controls6:45
21-Challenges, & considerations associated with implementing frameworks-pt13:58
21-Challenges, & considerations associated with implementing frameworks-pt29:14
22-When to use frameworks for the selection and implementation of controls3:48
23-Selecting and implementing cybersecurity controls based on NIST CSF PT14:58
23-Selecting and implementing cybersecurity controls based on NIST CSF PT210:32
24-Implementation Plan for selected controls7:16
25- Measuring the effectiveness of implemented controls9:57
Putting it all together-The Selection and Implementation of Cyber Risks controls11:29
Apply a structured, end-to-end process to select and implement cybersecurity risk controls by assessing context, risks, and assets, aligning with objectives, prioritizing controls, and planning, testing, monitoring, and training.
27-Course Recap-END3:23

Requirements

Basic to advance understanding of information security principles.

Description

This course was developed as a means of helping entry-level as well as seasoned cybersecurity professionals, to develop a more holistic rather than isolated approach to implementing controls to address cyber or information security risks. The content of this course is as follows:

SECTION 1 TOPICS

1a-Course Intro

1b-Course Intro- The Case at hand

2-About the course

3-Meet your Instructor-Mentor

4-Course Roadmap

5-Approach to Control Selection_ pt1

6-Approach to Control Selection_ pt2

7-Applying same approach to real Data Breaches at a high-level

8-Introduction to security controls

9-Key considerations for the identification- selection & implementation of controls

10-Risk Assessment-BIA, Control Selection, Cost Benefit Analysis

11-Cost Benefit Analysis associated with controls selection

12-Technology integration, Operational impact, continuous monitoring, Employee training

13-Regulatory Compliance, Incident Response Planning

SECTION 2 TOPICS

14-High-level process of selecting controls to protect eCommerce web server-Pt1

14-High-level process of selecting controls to protect eCommerce web server-Pt2

15-Steps involved in assessing the identified cyber risks in web server

16-Identify assets, identify threats, identify vulnerabilities

17-Determine likelihood, Impact, Calculate risk

18-Documenting Cybersecurity Risk Assessment Report-Pt 2

18-Documenting Cybersecurity Risk Assessment Report-Pt 1

19-The role of governance in the effective selection and implementation of cybersecurity controls

20-Why not implement frameworks that already have recommended controls

21-Challenges, considerations & disadvantages associated with implementing frameworks-Pt 1

21-Challenges, considerations & disadvantages associated with implementing frameworks-Pt 2

22-When to, versus when not to use frameworks for the selection and implementation of controls

23-Selecting and implementing cybersecurity controls based on the NIST Cybersecurity Framework (CSF) Pt1

23-Selecting and implementing cybersecurity controls based on the NIST Cybersecurity Framework (CSF) Pt2

24-Implementation Plan for identified controls

25- Measuring the effectiveness of implemented controls

26-Putting it all together-The Selection and Implementation of Cybersecurity Risks Controls

27-Course Recap-END

ASSIGNMENT-Research

Who this course is for:

This course id developed for entry-level cybersecurity professionals, seeking to enhance thier skillset.

Selection and Implementation of Security Controls

What you'll learn

Explore related topics

Course content

Introduction14 lectures • 1hr 3min

SECTION-218 lectures • 2hr 3min

Assignment- To reinforce knowledge gained0

Course Resources1 lecture • 1min

Requirements

Description

Who this course is for: