Enterprise Security Management

Program Description:

River Valley Community College, in association with Program Development in Cybersecurity with Focus on Business and Healthcare Concepts, has developed a 4-semester program to prepare students to working the Information Assurance (IA) field with a focus on Cybersecurity and Healthcare IT. Courses are intended to prepare students for assuring confidentiality, integrity and availability of IT systems and networks in healthcare settings, where scheduling, storage of images, filling prescriptions, billing and more are handled and stored using information technology.

Course Description:

This Course from River Valley Community College center focuses on enterprise security management, and asks students to consider the principles of risk management, security architectures, incident handling, disaster recovery, and secure systems administration. In completing the course, students will be able to: 1) Explain the basic concepts of and need for risk management, 2) Explain methods of mitigating risk by managing threats vulnerabilities, and exploits, 3) Identify compliancy laws, standards, best practices, and policies of risk management 4) Describe the components of an effective organizational risk management program, 5) Describe techniques for identifying and analyzing relevant threats, vulnerabilities, and exploits, 6) Describe the process of performing risk assessments, 7) Identify assets and activities to protect within an organization, 8) Identify threats, vulnerabilities, and exploits, 9) Identify risk mitigation security controls, 10) Describe concepts for planning risk mitigation throughout an organization, 11) Describe concepts for implementing a risk mitigation plan, 12) Perform a business impact analysis, 13) Create a business continuity plan (BCP) based on the findings of a given risk assessment for an organization, 14) Create a disaster recovery plan (DRP) based on the findings of a given risk assessment for an organization,  and 15) Create a computer incident response team (CIRT) plan for an organization.

Resources available as part of this course include a course outline and a syllabus from the Spring 2015 iteration of the course.

For orientation purposes, viewers should begin with CYBS 130R Enterprise Security Management March 2012.pdf, which offers a description of the course as well as an overview of topics covered through a course outline.

Course Contents:

The 4-page Course Outline document includes a course description, course competencies, course topics outline, learning and instructional methods for the course, and performance evaluation information.

The 7-page syllabus document includes a course introduction and description, information on required materials, learning objectives, overview of course structure and policies, course structure and content in the form of a table, and information on assessment and grading of the course.

Below is a list of the files attached. The size of each file is included in parenthesis.

Enterprise Security Management (2 files)

• Enterprise Security Management Course Outline (CYBS 130R Enterprise Security Management March 2012.pdf 97KB)
• Enterprise Security Management Syllabus (Spring2015_EnterpriseSecManagement_Syllabus.pdf 392KB)