BN324 - Enterprise Cyber Security and Management

Unit Overview

Credit Points:Prerequisite:Co-requisite:Workload:
15.00BN223 Cyber Security PrinciplesN/A48 contact hours
 

Aims & Objectives

This is a core unit out of a total of 24 units in the Bachelor of Networking (BNet). This unit addresses the BNet course learning outcomes and complements other courses in a related field by developing students’ specialised knowledge in cyber security in enterprise systems under the framework of management.

This unit is part of the AQF level 7 (BNet) course.

Students will be able to addresses key strategic cyber security issues from the perspective of an organisation's Chief Information Security Officer. Topics include communicating cyber issues to a board in terms that are relevant to them. Identity is addressed; especially the challenges that are associated with access control in a federated environment during times of transition such as during merger and acquisition. The highly interconnected nature of Cyber‐Physical systems are analysed to help provide a framework to reason about consequences (and their mitigation) in the face of cyber threat. Trends in cloud, IOT, analytics, mobile and social are looked at from the cyber perspective.

This unit will cover the following topics:

  • Enterprise organisations and trends: cloud, IOT, analytics, mobile and social
  • Risk Management and Cybersecurity Strategy
  • Aligning Risk to the Business Strategy, Enterprise Cybersecurity Strategy & Risk Management Solutions
  • Secure personal, network, devices and web application
  • Building Security in Maturity Model (BSIMM)
  • Aligning the ICT Organization with Regulatory Requirements
 

Learning Outcomes

At the completion of this unit students should be able to:

  1. Articulate cyber security imperatives to key decision makers in an enterprise organisation.
  2. Evaluate the cyber security posture of an organisation.
  3. Analyse the cyber security of an organisation's mission, considering both those inside and those outside the organisation.
  4. Analyse the cyber security consequences of the increasing connectedness of end‐point devices and control systems to an organisation's mission.
  5. Devise strategies and risk management solutions.

Teaching Method

Lecture: 2 hours
Tutorial/Lab: 2 hours
Face to Face

Assessment

Assessment TaskLearning Outcomes Assessed*Weighting
Mid term testa,b10%
Assignment 1b,c15%
Assignment 2d,e15%
Laboratory participation & submissiona-e10%
Final Examinationa-e50%
Total 100%

*refer to learning outcomes above.

Textbook

Note: Students are required to purchase the prescribed text book and have it available each week in class.

Prescribed Text Book:

There is no prescribed textbook for this unit.


Reference Reading

  • S. Donaldson, S. Siegel, C. K. Williams, Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program against Advanced Threats, Apress, USA, 2015
  • W. R. Simpson, Enterprise Level Security: Finding Security in an Uncertain Environment, Auerbach Publishers, USA, 2016
  • M. T. Simpson, N. Antill, Hands‐On Ethical Hacking and Network Defense, Cengage, 3rd Ed., 2018
  • A. Basta, N. Basta, M. Brown,Computer Security and Penetration Testing, Cengage, 2nd Ed., 2014
  • M. E. Whitman, H. J. Mattord, Principles of Information Security, Cengage, 6th Ed., 2018

Adopted Reference Style: IEEE

MIT is committed to ensure the course is current, practical and relevant so that graduates are “work ready” and equipped for life-long learning. In order to accomplish this, the MIT Graduate Attributes identify the required knowledge, skills and attributes that prepare students for the industry.
The level to which Graduate Attributes covered in this unit are as follows:

Ability to communicateIndependent and Lifelong LearningEthicsAnalytical and Problem Solving Cultural and Global AwarenessTeam workSpecialist knowledge of a field of study
       

 

Legend

Colour codingExtent covered
 The standard is covered by theory and practice, and addressed by assessed activities in which the students always play an active role, e.g. workshops, lab submissions, assignments, demonstrations, tests, examinations
 The standard is covered by theory or practice, and addressed by assessed activities in which the students mostly play an active role, e.g. discussions, reading, intepreting documents, tests, examinations
 The standard is discussed in theory or practice; it is addressed by assessed activities in which the students may play an active role, e.g. lectures and discussions, reading, interpretation, workshops, presentations 
 The standard is presented as a side issue in theory or practice; it is not specifically assessed, but it is addressed by  activities such as lectures or tutorials
The standard is not considered, there is no theory or practice or activities associated with this standard