Cybersecurity, also known as Information Security, is the protection of data and personally identifiable information from malicious attacks, theft, and destruction.
Failures of cybersecurity policies, both in large corporations and governmental agencies, have earned significant visibility and negative publicity in recent months and years. As the amount of data being stored continues to increase, and as hackers become more sophisticated, the need for cybersecurity is greater than ever.
Our Certificate in Cybersecurity offers lessons on the critical elements of information security, as well as foundational information about key certifications for professionals in the industry. Each of the eight modules in this suite will help learners master the vocabulary of the industry and offers examples, videos, interactive games, and review questions to ensure mastery of the material.
Modules can be taken in any order. You can download and print a Certificate of Completion upon completion of the course.
What You'll Learn:Asset SecurityCompanies must protect their assets. Just as locks go on the doors to protect physical assets, electronic and data assets must also be guarded. Asset security involves the full support of everyone in an organization, from corporate-level personnel down to front-line employees. Various security controls will be described that help protect privacy, along with data leakage prevention (DLP). Although it is not necessary, having some foundation in IT concepts is helpful in taking this course.
Learning Outcomes:- Understand the role of asset security and discuss its key themes
- Discuss the information life cycle and explain how information and data are classified
- Compare the various titles and roles of those involved with information security within an organization
- Learn about data and information privacy and how to protect privacy
- Compare different data retention and destruction methods
- Explain several methods for countering data leakage
Communication and Network SecurityThis module covers topics related to communications and network security. It begins with a lesson in the different types of networks and different transmission technologies. It also covers the two main models that govern how networks work: the OSI model and the TCP/IP model, as well as their related layers. The module includes a detailed discussion of the many protocols that allow networks and network devices to communicate with one another and includes a discussion of firewalls and wireless networks. This module is designed for IT professionals and other adult learners who are interested in gaining an introduction to information technology security.
Learning Outcomes:- Discuss the general concepts that enable networking and its role in information technology
- Compare the different types of networks, including LANs, WANs, and MANs, as well as the Internet, intranets, and extranets
- Explain what the Open Systems Interconnection (OSI) Reference Model is and identify its seven layers
- Contrast the OSI model with the TCP/IP Model
- Identify common protocols and differentiate between network, routing, and data link protocols
- Describe the functions of common networking devices, including bridges, routers, hubs, repeaters, switches, and firewalls
- Discuss how wireless networks work and the technology that enables them
- Identify common network attacks and how they can be prevented
Identity and Access ManagementThis module introduces students to the principles of access controls, beginning with the central modes of information security and continuing through various attacks and defenses. The module presents different kinds of authentication techniques, how they work, and how they are distinguished from each other. This module requires some basic understanding of IT concepts.
Learning Outcomes:- Understand the key principles and terminology of information access control
- Discuss different types of identification and authorization techniques
- Describe common access control models and mechanisms
- Identify common access control attacks and countermeasures
Security and Risk ManagementThis module covers the role of governance and risk management in information security. It looks at the policies and standards that are needed to operate an effective information security function and to oversee good information security practices. The module also includes a look at how modern organizations manage information security risks and how to conduct a risk analysis. It concludes by examining the process for providing information security training and education. This module requires some basic understanding of IT concepts.
Learning Outcomes:- Relate the many potential disasters and disruptions that can impact organizations and their information systems
- Describe the steps required in conducting a business impact assessment
- Explain the difference between a business continuity plan and a disaster recovery plan
- Discuss different recovery strategies and how they fit into disaster recovery planning
- Understand the business continuity organization and its responsibilities
- Prepare a business continuity and disaster recovery plan
- Discuss how organizations test their BCPs and DRPs, and perform different exercises to prepare for disruptions
Security Assessment and TestingThis module covers security assessment and testing, focusing on potential disruptions that can affect organizations and how they can be addressed with assessments and plans. Students will have the opportunity to practice how to assess the impact of disasters that may arise as well as to develop their own versions of these plans. This module requires a basic understanding of IT concepts.
Learning Outcomes:- Relate the many potential disasters and disruptions that can impact organizations and their information systems
- Describe the steps required in conducting a business impact assessment
- Explain the difference between a business continuity plan and a disaster recovery plan
- Discuss different recovery strategies and how they fit into disaster recovery planning
- Understand the business continuity organization and its responsibilities
- Prepare a business continuity and disaster recovery plan
- Discuss how organizations test their BCPs and DRPs, and perform different exercises to prepare for disruptions
Security Architecture and EngineeringThis module contains an introduction to the key concepts of cryptography and security engineering. It examines the role of encryption in information security and considers common encryption methods. In addition, the module discusses ciphers, their substitutes, and how they work. Public key infrastructure and management is also covered. This module requires a basic understanding of IT concepts.
Learning Outcomes:- Understand how cryptography works and its role in information security
- Compare and contrast different ciphers and explain how they work
- Create substitution ciphers and encode and decode cleartext and ciphertext
- Discuss how encryption enables secure transmission of sensitive data
- Explain and compare symmetric and asymmetric cryptography
- Describe the role of public key infrastructure and key management
Security OperationsThis module contains a detailed overview of security operations: administrative controls, trusted recovery and change and incident management. This module establishes a foundation in auditing, monitoring and detection in information security. This module requires a basic understanding of IT concepts.
Learning Outcomes:- Understand the role of security operations and discuss its key themes
- Discuss several administrative controls and explain how they can improve information security
- Compare different security controls and explain how they work
- Identify trusted recovery techniques
- Relate the steps required in effective incident management and response
- Discuss the role of auditing, monitoring, and detection in information security
- Describe the steps involved in a digital forensics investigation
Software Development SecurityThis module covers software development security while focusing on the systems development life cycle, operating systems, and their environments.