CYB208 – Cybersecurity Resilience
Given the increasing prevalence of cyber-attacks in modern organisations, incident response is an essential skill for cybersecurity practitioners. Cybersecurity strategy and resilience must be paired with incident response, as incident response is an essential component of a strategy as well as the method for refining and amending future strategies. Students who can analyse an incident and learn how to adapt will better prepare their organisations for the modern threat landscape.
In this unit students will be introduced to the fundamental principles and practices of cyber strategy, resilience and incident response in organisations. The unit includes foundational knowledge on strategy leading to the strategic-level cyber context of modern organisations, Advanced Persistent Threats or APTs, the kill chain model, and broader operational, legal, regulatory and contractual obligations for organisations.
Students also work with cybersecurity strategies, particularly the two paradigms of prevention and response, incident response process and its key organisational functions such as SOCs or security operations centres, Cyber War Rooms and Bridge lines. The final component of the unit presents the anatomy of a crisis before constructing the role of a Chief Crisis Offer and discussing advanced topics such as agility and organisational learning from past incidents.
Learning Outcomes:
- Analyse and describe the role of cyber threat actors in the contemporary context of organisations and society
- Examine and reflect on the role and diverse perspectives related to cyber strategy and resilience in the context of contemporary organisations
- Critically analyse organisational responses to cyber-attacks from the integrated perspective of people, process and technology
- Define agility in incident response and identify key people, process and technology barriers to achieving agility in organisations
- Design a strategic plan to develop cyber resilience and response agility for organisations