Building Your Knowledge: Looking Ahead

This week you have built a detailed understanding of the threats and vulnerabilities facing organisations, developed your ability to assess and prioritise risk using structured frameworks, explored threat mitigation strategies and received an introduction to incident response planning. These are the analytical and practical tools that underpin effective security management.

The weeks that follow will continue to build on this foundation:

• Week 4: you will move from planning to practice, examining how security management systems are implemented and operated in real organisational environments. You will explore cloud security and mobile security in depth, examine the operational side of incident response (what actually happens when your plan is activated), and consider how security performance is monitored and improved over time.
• Week 5: you will shift focus to the human, legal and ethical dimensions of cyber security. You will explore the psychology of security behaviour in more depth, examine insider threats and the specific challenges of managing human risk, and return to the global legal and regulatory landscape with a particular focus on the professional and ethical responsibilities of managers who handle sensitive data.
• Week 6: you will take a strategic and forward-looking perspective, examining the implications of emerging technologies including artificial intelligence for both the threat landscape and the security management response, and developing a framework for building long-term cyber resilience in your organisation.

The connections between this week and the weeks ahead are important. The threat categories identified this week, particularly ransomware, phishing and supply chain attacks, will reappear in Week 4 when you examine incident response in practice. The risk assessment skills developed this week provide the foundation for the risk-based decision-making that runs through the remainder of the course. Keep building on the foundations. Each week adds a new layer to a coherent and practical understanding of cyber security management.