- Study with us
- Federation University at MIT
- About us
BN324 - Enterprise Cyber Security and Management
|15.00||BN223 Cyber Security Principles||N/A||48 contact hours|
Aims & Objectives
This is a core unit out of a total of 24 units in the Bachelor of Networking (BNet). This unit addresses the BNet course learning outcomes and complements other courses in a related field by developing students’ specialised knowledge in cyber security in enterprise systems under the framework of management.
This unit is part of the AQF level 7 (BNet) course.
Students will be able to addresses key strategic cyber security issues from the perspective of an organisation's Chief Information Security Officer. Topics include communicating cyber issues to a board in terms that are relevant to them. Identity is addressed; especially the challenges that are associated with access control in a federated environment during times of transition such as during merger and acquisition. The highly interconnected nature of Cyber‐Physical systems are analysed to help provide a framework to reason about consequences (and their mitigation) in the face of cyber threat. Trends in cloud, IOT, analytics, mobile and social are looked at from the cyber perspective.
This unit will cover the following topics:
- Enterprise organisations and trends: cloud, IOT, analytics, mobile and social
- Risk Management and Cybersecurity Strategy
- Aligning Risk to the Business Strategy, Enterprise Cybersecurity Strategy & Risk Management Solutions
- Secure personal, network, devices and web application
- Building Security in Maturity Model (BSIMM)
- Aligning the ICT Organization with Regulatory Requirements
At the completion of this unit students should be able to:
- Articulate cyber security imperatives to key decision makers in an enterprise organisation.
- Evaluate the cyber security posture of an organisation.
- Analyse the cyber security of an organisation's mission, considering both those inside and those outside the organisation.
- Analyse the cyber security consequences of the increasing connectedness of end‐point devices and control systems to an organisation's mission.
- Devise strategies and risk management solutions.
Lecture: 2 hours
Tutorial/Lab: 2 hours
Tutorial/Lab: 2 hours
Face to Face
|Assessment Task||Learning Outcomes Assessed*||Weighting|
|Mid term test||a,b||10%|
|Laboratory participation & submission||a-e||10%|
*refer to learning outcomes above.
Note: Students are required to purchase the prescribed text book and have it available each week in class.
Prescribed Text Book:
There is no prescribed textbook for this unit.
- S. Donaldson, S. Siegel, C. K. Williams, Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program against Advanced Threats, Apress, USA, 2015
- W. R. Simpson, Enterprise Level Security: Finding Security in an Uncertain Environment, Auerbach Publishers, USA, 2016
- M. T. Simpson, N. Antill, Hands‐On Ethical Hacking and Network Defense, Cengage, 3rd Ed., 2018
- A. Basta, N. Basta, M. Brown,Computer Security and Penetration Testing, Cengage, 2nd Ed., 2014
- M. E. Whitman, H. J. Mattord, Principles of Information Security, Cengage, 6th Ed., 2018
Adopted Reference Style: IEEE
MIT is committed to ensure the course is current, practical and relevant so that graduates are “work ready” and equipped for life-long learning. In order to accomplish this, the MIT Graduate Attributes identify the required knowledge, skills and attributes that prepare students for the industry.
The level to which Graduate Attributes covered in this unit are as follows:
|Ability to communicate||Independent and Lifelong Learning||Ethics||Analytical and Problem Solving||Cultural and Global Awareness||Team work||Specialist knowledge of a field of study|
|Colour coding||Extent covered|
|The standard is covered by theory and practice, and addressed by assessed activities in which the students always play an active role, e.g. workshops, lab submissions, assignments, demonstrations, tests, examinations|
|The standard is covered by theory or practice, and addressed by assessed activities in which the students mostly play an active role, e.g. discussions, reading, intepreting documents, tests, examinations|
|The standard is discussed in theory or practice; it is addressed by assessed activities in which the students may play an active role, e.g. lectures and discussions, reading, interpretation, workshops, presentations|
|The standard is presented as a side issue in theory or practice; it is not specifically assessed, but it is addressed by activities such as lectures or tutorials|
|The standard is not considered, there is no theory or practice or activities associated with this standard|