MSC 5702 Cybersecurity Operations
This course builds on the foundations course and covers the day-to-day operational aspects of cybersecurity. It provides an understanding of the role and importance of various operations: from vulnerability and patch management, identity and access management, configuration and change management, log management, application security, data protection & privacy, data encryption, network security, asset management, endpoint security, physical security, incident management, cyber threat intelligence, digital forensics, disaster recovery and business continuity planning (DRP/BCP), to all other security operations center (SOC) functions, automation, artificial intelligence, threat intelligence, threat management. In this course students also get to learn and discuss the capture of relevant data and the use of operational data analytics including cybersecurity dashboards. Roles, skills, budgeting, and other operational issues will be covered in this course.