Course: Cyber Security for Business: Strategy, Risk and Resilience

Information Security Management System In Week 2 you were introduced to the concept of an Information Security Management System and the ISO/IEC 27001:2022 standard that governs it. This week you …

Building Your Knowledge: Looking Ahead This week you have built a detailed understanding of the threats and vulnerabilities facing organisations, developed your ability to assess and prioritise risk using structured …

Interactive Activity: Risk Assessment Exercise and Prioritisation This activity asks you to apply the risk assessment concepts and threat knowledge from this week to a realistic scenario. You will identify …

Case Study: The WannaCry Ransomware Attack, Global (2017) Organisation: Multiple organisations across 150 countries Sector: Healthcare, public sector, telecommunications, manufacturing and others | Region: Global | Year: 2017 What Happened …

Introduction to Incident Response Planning Even with the most comprehensive preventive controls in place, the likelihood of a security incident occurring at some point is very high. The Verizon 2025 …

Threat Analysis and Mitigation Strategies Threat analysis is the process of examining specific threats in sufficient depth to understand how they operate, what they target, who is likely to conduct …

Risk Assessment Frameworks and Tools A risk assessment is the systematic process of identifying what information assets need to be protected, what threats and vulnerabilities could affect them, how likely …

Vulnerabilities in Systems and Processes A vulnerability is a weakness in a system, process, policy or behaviour that a threat actor could exploit to cause harm. Vulnerabilities are the gaps …

Types of Cyber Threats and Attack Vectors A cyber threat is any potential cause of harm to an information asset. An attack vector is the specific pathway or method an …

Welcome to Week 3 In Week 1 you established the foundational concepts of cyber security and the CIA Triad. In Week 2 you explored how organisations manage information security systematically, …

Reflection Task: Governance and Controls in Your Organisation Estimated time: 30 to 45 minutes | To complete before Week 3 Part One: Personal Reflection This week introduced the idea that …

Building Your Knowledge: Looking Ahead Week 2 has developed your understanding of how organisations manage information security in a structured and systematic way. You have explored the Information Security Management …

Interactive Activity: Identifying Security Controls in a Business Scenario This activity is designed to develop your ability to identify security control gaps and recommend appropriate responses from a management perspective. …

Case Study: The Capital One Data Breach, United States (2019) Organisation: Capital One Financial Corporation, one of the ten largest banks in the United States Sector: Financial Services Region: United …

The Role of Compliance and Regulatory Requirements Compliance in an information security context refers to an organisation’s obligation to meet the requirements set by laws, regulations, industry standards and contractual …