黑料传送门

Security Foundations lays the foundation for understanding terminology, principles, processes, and information security best practices at local and global levels. This course further provides an overview of networking components, network security vulnerabilities, and countermeasures for protecting information assets through planning and administrative controls within an organization.

Security Operations provides learners with the fundamental skills to handle and respond to computer security incidents in an information system. The course addresses various underlying principles and techniques for detecting and responding to current and emerging computer security threats. The course also helps learners explore strategies to leverage intelligence and threat detection techniques, analyze and interpret data, identify and address vulnerabilities, and suggest preventative measures. Methods are introduced to effectively respond to and recover from cybersecurity incidents, evaluate risk assessment methodologies, and apply incident handling laws and policies.

Penetration Testing introduces learners to the skills necessary to perform penetration testing and vulnerability management within an organization. The course covers widely used penetration testing techniques and tools that focus on planning and scoping, information gathering, vulnerability identification, and attacks and exploits. In addition, it offers hands-on experience and a focus on penetration testing engagement plans

Cloud Security prepares learners to design solutions for cloud-based platforms and operations that maintain data availability while protecting the confidentiality and integrity of information. Course topics include cloud service models, deployment methods, identity and access management (IAM) strategies, auditing and monitoring strategies, assessing and mitigating common cloud security threats, and managing compliance and regulation requirements. The course also offers hands-on experience deploying and assessing IAM controls in a cloud environment.

Cybersecurity Management prepares learners to develop organizational information security programs and policies that follow recognized standards, comply with all governing laws and regulations, and meet the needs of the company culture and management organization. The course covers how to perform risk management institutionally, how to manage compliance to information security requirements, and how to delegate compliance, risk, and security functions to specific roles within the organization. It also helps learners apply strategic decision-making as companies adapt to new technologies, processes, and people practices related to processing, managing, and protecting information resources.

Governance, Risk, and Compliance provides learners with advanced skills and knowledge to authorize and maintain information systems utilizing various risk management frameworks. The course focuses on the strategic and long-term alignment of an organization's information security program to regulatory requirements and organizational policies. Course topics include compliance and regulatory requirements, data classification and prioritization, security and privacy controls, compliance audits and remediation, and risk management plans.

Secure Network Design provides the foundational knowledge and skills to design secure physical and logical network architectures for wired and wireless networks. Course topics include the characteristics of a secure network, techniques to securely configure network devices, network segmentation strategies, root cause analysis, and mitigation approaches based on industry best practices. The course also offers hands-on experience in network vulnerability analysis and network configuration.

Secure Software Design focuses on the variety of elements needed to address and implement secure software acquisition and development throughout the software development life cycle (SDLC). The course addresses people, technology, tools, and processes to design and develop consistently secure applications from start to finish. Additionally, it underscores the importance and value of the Defense in Depth principle across the entire SDLC. The course also introduces techniques to adapt common security activities to modern software development practices such as Agile and DevSecOps.

Cybersecurity Architecture and Engineering provides learners with advanced skills and knowledge to design secure enterprise architecture solutions. The course focuses on assessing cybersecurity readiness and implementing enterprise-wide solutions to protect data and comply with an organization's policies and frameworks. Course topics include integrating software applications, applying enterprise data security controls, evaluating cloud and virtualization solutions, analyzing threats and vulnerabilities, and responding to incidents.

The Master of Science in Cybersecurity and Information Assurance (MSCSIA) Capstone project allows learners to demonstrate their capability to establish a durable cybersecurity and information assurance program. The capstone project challenges learners to integrate skills and knowledge from all program domains into one project that addresses a significant real-world cybersecurity problem.