ISM527 - Cyber Security Management

(1)

ISM527 - Cyber Security Management

Credit Hours: 3

Contact Hours: This is a 3-credit course, offered in accelerated format. This means that 16 weeks of material is covered in 8 weeks. The exact number of hours per week that you can expect to spend on

well as your study style and preferences. You should plan to spend 10

week in each course reading material, interacting on the discussion boards, writing papers, completing projects, a

Course Description and Outcomes

Course Description:

This course provides graduates with insight to the complexities with the implementation and management cyber security in an enterprise. Students will need to perform risk assessments and recommend mitigations to protect digital assets in the workplace. Other topics in this course include: Disaster recovery, incident handling, cyber security policy implementation, as well as privacy and legal issues related to cyber security

Course Overview:

Cyber security has become a topic of critical importance in today’s The study of cyber security management

security professionals to combat security breaches and threats. This course information security and in-depth knowledge of

Students examine key strategies and methodologies used to increase business continuity and disaster preparedness. Also presented are methods of securing information systems using security controls, policies best practices with coverage extended to additional topics including

security laws and regulations. Course Learning Outcomes:

1. Evaluate internal and external threats and vulnerabilities to data assets in the enterprise and provide recommendations to mitigate or eliminate areas of weakness.

2. Describe and apply the requirements to secure the physical perimeter of an enterprise.

3. Identify and explain how to respond to social engineering techniques used to compromise digital assets in an enterprise.

4. Analyze an existing enterprise infrastructure and provide a comprehensive security assessment.

Participation & Attendance

Cyber Security Management

credit course, offered in accelerated format. This means that 16 weeks of material is covered in 8 weeks. The exact number of hours per week that you can expect to spend on each course will vary based upon the weekly coursework, as well as your study style and preferences. You should plan to spend

10-week in each course reading material, interacting on the discussion boards, writing papers, completing projects, and doing research.

Course Description and Outcomes

This course provides graduates with insight to the complexities with the implementation and management cyber security in an enterprise. Students will need to perform risk assessments and recommend mitigations to protect digital assets in the workplace. Other topics in this course include: Disaster recovery, incident handling,

lementation, as well as privacy and legal issues related to cyber security

of critical importance in today’s networked and interconnected environment. yber security management describes the techniques, methods, and strategies used by information security professionals to combat security breaches and threats. This course provides an overview of the field of

depth knowledge of the complex nature of related threats and countermeasures Students examine key strategies and methodologies used to increase business continuity and disaster

ethods of securing information systems using security controls, policies erage extended to additional topics including information privacy and information

Evaluate internal and external threats and vulnerabilities to data assets in the enterprise and provide recommendations to mitigate or eliminate areas of weakness.

Describe and apply the requirements to secure the physical perimeter of an enterprise.

Identify and explain how to respond to social engineering techniques used to compromise digital assets Analyze an existing enterprise infrastructure and provide a comprehensive security assessment.

credit course, offered in accelerated format. This means that 16 weeks of material is covered in 8 weeks. The exact number of hours per week that you can

each course will vary based upon the weekly coursework, as -25 hours per week in each course reading material, interacting on the discussion boards, writing

This course provides graduates with insight to the complexities with the implementation and management of cyber security in an enterprise. Students will need to perform risk assessments and recommend mitigations to protect digital assets in the workplace. Other topics in this course include: Disaster recovery, incident handling,

lementation, as well as privacy and legal issues related to cyber security.

interconnected environment. and strategies used by information provides an overview of the field of

and countermeasures. Students examine key strategies and methodologies used to increase business continuity and disaster

ethods of securing information systems using security controls, policies, and information privacy and information

Evaluate internal and external threats and vulnerabilities to data assets in the enterprise and provide Describe and apply the requirements to secure the physical perimeter of an enterprise.

Identify and explain how to respond to social engineering techniques used to compromise digital assets Analyze an existing enterprise infrastructure and provide a comprehensive security assessment.

(2)

Prompt and consistent attendance in your online courses is essential for your success at CSU

Failure to verify your attendance within the first 7 days of this course may result in your withdrawal. If for some reason you would like to drop a course, please contact your advisor.

Online classes have deadlines, assignments, and participation requirements just like on your time carefully and keep an open line of communication with your instructor. problems, problems with your assignments, or

instructor know as soon as possible.

Course Materials

Textbook Information is located in the CSU

Course Schedule

Due Dates

The Academic Week at CSU-Global begins on Monday and ends the following Sunday. • Discussion Boards: The original

Responses posted by Sunday 11:59 p.m.

• Mastery Exercises: Students may access and retake mastery exercises they achieve the scores they desire.

• Critical Thinking Activities: Assignments are due Sunday at

Week # Readings

1

• Chapter 1 in Management of Information Security

2

• Chapters 2 & 3 in Management of Information Security

3

4

5

6

7

• Chapter 11 in Management of

8

rompt and consistent attendance in your online courses is essential for your success at CSU

verify your attendance within the first 7 days of this course may result in your withdrawal. If for some reason you would like to drop a course, please contact your advisor.

nline classes have deadlines, assignments, and participation requirements just like on-campus classes. your time carefully and keep an open line of communication with your instructor. If you are having technical

ents, or other problems that are impeding your progress, let your

Textbook Information is located in the CSU-Global Booklist on the Student Portal.

Global begins on Monday and ends the following Sunday. riginal post must be completed by Thursday at 11:59 p.m.

11:59 p.m. MT. Late posts may not be awarded points.

udents may access and retake mastery exercises through the last day of class they desire.

Assignments are due Sunday at 11:59 p.m. MT.

Readings Assignments

Management of Information Security • Discussion (25 points) • Mastery (10 points) • Critical Thinking ( Management of Information Security • Discussion (25 points)

• Mastery (10 points) Management of Information Security • Discussion (25 points)

• Mastery (10 points) • Critical Thinking ( Management of Information Security • Discussion (25 points)

• Mastery (20 points) • Portfolio (350 points)

rompt and consistent attendance in your online courses is essential for your success at CSU-Global Campus. verify your attendance within the first 7 days of this course may result in your withdrawal. If for some

campus classes. Budget If you are having technical problems that are impeding your progress, let your

11:59 p.m. MT and Peer Late posts may not be awarded points.

through the last day of class until

Assignments Discussion (25 points) Mastery (10 points)

Critical Thinking (120 points) Discussion (25 points) Mastery (10 points) Discussion (25 points) Mastery (10 points)

Critical Thinking (120 points) Discussion (25 points) Mastery (20 points) Discussion (25 points) Mastery (10 points)

Critical Thinking (110 points) Discussion (25 points) Mastery (10 points) Discussion (25 points) Mastery (10 points) Discussion (25 points) Mastery (20 points) Portfolio (350 points)

(3)

Assignment Details

This course includes the following assignments/projects: Module 1

Critical Thinking: Case Analysis of Security Breaches (120 Points)

In the digital world, information security is critical to the success and health of any organization. Any security breach, even a small, one can have devastating consequences.

Using the Internet, find two recent examples in which organizations have experienced security breaches. Then describe and analyze both cases, offering solutions that would have prevented each breach. Yo

account for each of the following items:

1. Provide a description and overview of the incident. 2. Describe what led to or allowed the breach to occur. 3. Explain how vulnerabilities allowed the breach to occur. 4. Explain what could have been done to

5. Describe the changes or actions would you recommend the two organizations implement going forward to prevent similar attacks in the future.

Discuss concepts from the Module 1 materials that apply to the security breaches that you ide

assigned readings for Module 1 at least one time. Also cite at least one additional credible or scholarly source to support your analysis and positions. The CSU

should be 2-3 pages in length with document and citation formatting per CSU Requirements.

Module 3

Critical Thinking: Drafting a Security Policy (120 Points)

Security policies are common within organizations that focus on

Assume that you are tasked with drafting a security policy for an existing or fictitious organization. If fictitious, make sure the specifics of the organizations are based on research or experience. You can view so

policies at: http://www.sans.org/security

For this assignment, submit a working draft of one of the three types of security policies listed below. 1. Acceptable use policy (AUP)

2. Risk assessment policy 3. Remote access policy

Preface your policy draft with a brief description of the organization. Then describe and justify the need for key elements required for the policy as they apply to your organization. Make sure that the specific elements discussed an analyzed in the policy draft align with the needs and requirements that were specified for the organization Discuss and cite the assigned readings for Module 3 and at least one additional credible or scholarly source to support your analysis and positions. The CSU

should be 2-3 pages in length with document and citation formatting per CSU Requirements.

course includes the following assignments/projects:

Case Analysis of Security Breaches (120 Points)

In the digital world, information security is critical to the success and health of any organization. Any security even a small, one can have devastating consequences.

Using the Internet, find two recent examples in which organizations have experienced security breaches. Then describe and analyze both cases, offering solutions that would have prevented each breach. Yo

account for each of the following items:

Provide a description and overview of the incident. Describe what led to or allowed the breach to occur. Explain how vulnerabilities allowed the breach to occur. Explain what could have been done to prevent the breach.

Describe the changes or actions would you recommend the two organizations implement going forward to prevent similar attacks in the future.

Discuss concepts from the Module 1 materials that apply to the security breaches that you ide

assigned readings for Module 1 at least one time. Also cite at least one additional credible or scholarly source to support your analysis and positions. The CSU-Global Library is a good place to find scholarly sources. Your paper 3 pages in length with document and citation formatting per CSU-Global Guide to Writing and APA

Drafting a Security Policy (120 Points)

Security policies are common within organizations that focus on providing secure computing environments. Assume that you are tasked with drafting a security policy for an existing or fictitious organization. If fictitious, make sure the specifics of the organizations are based on research or experience. You can view so

policies at: http://www.sans.org/security-resources/policies/.

For this assignment, submit a working draft of one of the three types of security policies listed below. Acceptable use policy (AUP)

Preface your policy draft with a brief description of the organization. Then describe and justify the need for key elements required for the policy as they apply to your organization. Make sure that the specific elements discussed

draft align with the needs and requirements that were specified for the organization Discuss and cite the assigned readings for Module 3 and at least one additional credible or scholarly source to support your analysis and positions. The CSU-Global Library is a good place to find scholarly sources. Your paper

3 pages in length with document and citation formatting per CSU-Global Guide to Writing and APA In the digital world, information security is critical to the success and health of any organization. Any security

Using the Internet, find two recent examples in which organizations have experienced security breaches. Then describe and analyze both cases, offering solutions that would have prevented each breach. Your essay should

Describe the changes or actions would you recommend the two organizations implement going forward

Discuss concepts from the Module 1 materials that apply to the security breaches that you identified and cite the assigned readings for Module 1 at least one time. Also cite at least one additional credible or scholarly source to

Global Library is a good place to find scholarly sources. Your paper Global Guide to Writing and APA

providing secure computing environments. Assume that you are tasked with drafting a security policy for an existing or fictitious organization. If fictitious, make sure the specifics of the organizations are based on research or experience. You can view some sample

For this assignment, submit a working draft of one of the three types of security policies listed below.

Preface your policy draft with a brief description of the organization. Then describe and justify the need for key elements required for the policy as they apply to your organization. Make sure that the specific elements discussed

draft align with the needs and requirements that were specified for the organization. Discuss and cite the assigned readings for Module 3 and at least one additional credible or scholarly source to

ary is a good place to find scholarly sources. Your paper Global Guide to Writing and APA

(4)

Module 5

Critical Thinking: Security Analysis of a Case Study (110 Points)

Security vulnerabilities include system bugs, irregularities, and other issues that provide mechanisms for

exploitation and unintended system use. The larger and more complex a system is, the greater the likelihood that vulnerability exists. Sony, for example, is a well-recognized player in the electronics and, music recording

industries. Yet in 2011 the company was subject to various security breaches as a result of system/device vulnerabilities.

Use the Internet and/or CSU-Global Library resources to research the 2011 security breaches experienced by Sony. Then write a paper that accounts for each of the following items:

1. Describe the security breaches experienced by Sony in 2011. 2. Describe the economic consequences.

3. Describe and explain some non-economic consequences.

4. Discuss how the organization’s reputation and brand were affected.

5. Describe what Sony did to restore customer confidence and address the security issues that allowed the breaches.

6. Analyze Sony’s previous and current security practices and evaluate the company’s response to this security breach.

Cite at last two credible sources, online or in print, to document your description of the Sony case and discuss and cite the assigned readings for Module 5 and at least one additional credible or scholarly source to support your analysis and positions. The CSU-Global Library is a good place to find scholarly sources. Your paper should be 2-3 pages in length with document and citation formatting per CSU-Global Guide to Writing and APA Requirements. Module 8

Portfolio Project: Organizational Risk & Security Plan (350 Points) Scenario

Assume you serve as an IT Security intern for a military defense contractor called Military Delivery Logistics (MDL), which is based in Washington, D.C. Because your organization contracts with the U.S. military, the organization is required to perform regular risk and security assessments on all of its systems.

Senior management at MDL have determined that the existing risk and security management plan for the organization is out of date and that a new risk management plan needs to be developed in compliance with strict military and Department of Defense (DoD) requirements. Because of the importance of risk management to the organization, senior management is committed to, and supportive of, the project to develop a new plan. You have been assigned to develop this new plan.

The risk & security management plan will consist of a number of different sections. You have been asked to draft the Business Continuity section.

Directions

Draft the business continuity section of the risk and security plan. Assume that MDL has five terabytes (5 TB) of data that needs to be accessible immediately following any disaster or security incident. Apply what you have learned throughout this course in accounting for the following items as key parts of your plan:

1. Describe the business and the risk and security issues associated with the organization, which will require that you contrive that you contrive particulars for the fictional organization to the degree necessary.

(5)

2. Explain how to recover business operations while efforts are ongoing to restart previous operations. 3. Identify and analyze potential vendor partnerships that need to be in place to ensure a speedy recovery

and business continuity.

4. Describe a testing plan to correct any issues with the continuity plan.

Discuss and cite at least three credible or scholarly sources other than the assigned readings to support your analysis and positions. You may also cite assigned readings as applicable. The CSU

find scholarly sources. Your paper should be 8 Global Guide to Writing and APA Requirements Helpful Resources

ISO/IEC 22399:2007 Guideline for incident preparedness and operational continuity management.

ISO/IEC 24762:2008 Guidelines for information and communications technology disaster recovery services.

Course Grading

20% Discussion Participation 10% Mastery Exercises

35% Critical Thinking Activities 35% Final Portfolio Paper

In-Classroom Policies

For information on late work and Incomplete grade policies, please refer to our

and Guidelines or the Academic Catalog for comprehensive documentation of CSU

Academic Integrity

Students must assume responsibility for maintaining honesty in all work submitted for credit and in any

work designated by the instructor of the course. Academic dishonesty includes cheating, fabrication, facilitating academic dishonesty, plagiarism, reusing

APA Requirements for percentage of repurposed work that can be used in an assignment) possession of academic materials, and unauthorized collaboration. The

on how students can avoid plagiarism by understanding what it is and how to use resources.

Citing Sources with APA Style

All students are expected to follow the (based on the APA Style Manual, 6th edition) review the APA resources within the CSU

document should also be provided within most assignment descriptions on your course’s Assignments page. Explain how to recover business operations while efforts are ongoing to restart previous operations. Identify and analyze potential vendor partnerships that need to be in place to ensure a speedy recovery Describe a testing plan to correct any issues with the continuity plan.

Discuss and cite at least three credible or scholarly sources other than the assigned readings to support your analysis and positions. You may also cite assigned readings as applicable. The CSU-Global Library is a good place to

paper should be 8-10 pages in length with document and citation formatting per Global Guide to Writing and APA Requirements.

ISO/IEC 22399:2007 Guideline for incident preparedness and operational continuity management.

2:2008 Guidelines for information and communications technology disaster recovery services.

20% Discussion Participation 35% Critical Thinking Activities

Grading Scale and Policies

A 95.0 – 100

A- 90.0 – 94.9

B+ 86.7 – 89.9

B 83.3 – 86.6

B- 80.0 – 83.2

C+ 75.0 – 79.9

C 70.0 – 74.9

D 60.0 – 69.9

F 59.9 or below

For information on late work and Incomplete grade policies, please refer to our In-Classroom Student Policies or the Academic Catalog for comprehensive documentation of CSU-Global institutional policies.

Students must assume responsibility for maintaining honesty in all work submitted for credit and in any

work designated by the instructor of the course. Academic dishonesty includes cheating, fabrication, facilitating reusing /re-purposing your own work (see CSU-Global Guide to Writing and for percentage of repurposed work that can be used in an assignment), unauthorized

unauthorized collaboration. The CSU-Global Library provides can avoid plagiarism by understanding what it is and how to use the Library and

tudents are expected to follow the CSU-Global Guide to Writing and APA Requirements

(based on the APA Style Manual, 6th edition) for all assignments. For details on CSU-Global APA style, please review the APA resources within the CSU-Global Library under the “APA Guide & Resources” link. A link to this document should also be provided within most assignment descriptions on your course’s Assignments page.

Explain how to recover business operations while efforts are ongoing to restart previous operations. Identify and analyze potential vendor partnerships that need to be in place to ensure a speedy recovery

Discuss and cite at least three credible or scholarly sources other than the assigned readings to support your Global Library is a good place to 10 pages in length with document and citation formatting per

CSU-ISO/IEC 22399:2007 Guideline for incident preparedness and operational continuity management.

2:2008 Guidelines for information and communications technology disaster recovery services.

Grading Scale and Policies

Classroom Student Policies Global institutional policies.

Students must assume responsibility for maintaining honesty in all work submitted for credit and in any other work designated by the instructor of the course. Academic dishonesty includes cheating, fabrication, facilitating

Global Guide to Writing and , unauthorized

ibrary provides information ibrary and Internet

rements when citing in APA Global APA style, please Resources” link. A link to this document should also be provided within most assignment descriptions on your course’s Assignments page.

(6)

Netiquette

Respect the diversity of opinions among the instructor and classmates and engage with them in a courteous, respectful, and professional manner. All posts and classroom communication must be conducted in accordance with the student code of conduct. Think before you push the Send button. Did you say just what you meant? How will the person on the other end read the words?

Maintain an environment free of harassment, stalking, threats, abuse, insults or humiliation toward the

instructor and classmates. This includes, but is not limited to, demeaning written or oral comments of an ethnic, religious, age, disability, sexist (or sexual orientation), or racist nature; and the unwanted sexual advances or intimidations by email, or on discussion boards and other postings within or connected to the online classroom. If you have concerns about something that has been said, please let your instructor know.