Building Your Knowledge: Looking Ahead

Week 2 has developed your understanding of how organisations manage information security in a structured and systematic way. You have explored the Information Security Management System, the key governance frameworks and standards that guide organisational security, the types of controls available and how they work, the principles of risk management, and the compliance landscape that shapes organisational obligations around the world.

These are the building blocks on which the rest of the course is constructed. As you progress through the remaining weeks, you will deepen, apply and extend this knowledge in the following ways:

• Week 3: you will develop a more detailed understanding of specific cyber threats and vulnerabilities, including the most common attack vectors facing organisations today. You will learn how to carry out and contribute to a structured risk assessment using established frameworks and tools, building directly on the risk management principles introduced this week.
• Week 4: you will examine how security management systems are planned and implemented in practice, including the operational side of running a secure team environment. You will explore cloud security, mobile security and the specific challenges of managing security in distributed and hybrid working contexts. You will also examine incident response: what happens when something goes wrong and how organisations recover.
• Week 5: you will explore the human, legal and ethical dimensions of cyber security in depth. This includes the psychology of security behaviour, the specific risks posed by insider threats, and the professional and ethical responsibilities of managers who handle sensitive data. You will also examine the legal landscape in greater detail, including the obligations created by data protection legislation in different jurisdictions.
• Week 6: you will step back and consider the strategic picture. You will examine emerging trends including artificial intelligence and its implications for both security threats and security management, and you will develop a strategic perspective on building long-term cyber resilience in your organisation. The final week will also prepare you for further study and professional development in cyber security.

Keep building the connections between weeks. The CIA Triad from Week 1 is directly reflected in the design of security controls and governance frameworks you have studied this week. The risk management principles introduced this week will deepen significantly in Week 3. The compliance themes explored today will return in Week 5 with a greater focus on the human and ethical dimensions. Each week’s learning is cumulative, and the connections between topics are as important as the topics themselves.