17 Cybersecurity CORe courses: 301, 401, 402, 403

CPS 301 Information Assurance and Critical Thinking

Course Description

Topics related to business needs and requirements, information assurance, information security, risk management, logic, communication and critical thinking in cyber-security or cyber-physical systems security. The course also examines the components of a comprehensive information assurance plan, day-to-day operation enterprise risk management, NIST cybersecurity framework, and NIST risk management framework.

• Identify the essential components of risk assessment
• Analyze information assurance incidents and determine potential solutions
• Communicate effectively with stakeholders in regards to risk priorities
• Create an information assurance plan for a small or mid-size organization

CPS 401 Defense Security

Course Description

Provides a baseline of fundamental knowledge of defensive security. Includes systems engineering, scripting, cyber-informed engineering, cyber-kill chain, cloud security, MITRE ATT&CK human elements, logging, detection, prevention, monitoring, policies, programs, and procedures at different levels of an information system. Discusses creating and assessing security architectures, including DoDAF, SABSA, and MORDA.

• Identify the key components of a security program.
• Apply industry standards framework for systems defense.
• Perform risk assessment on a given organization.
• Create educational materials for internal stakeholders’ involvement in protecting the organization network.
• Create a skeleton Security Policy for a small organization.
• Apply the MITRE ATT&CK Framework.
• Apply key concepts of the Zero Trust Architecture and the different existing frameworks.

CPS 402 Offensive Security

Course Description

Discusses the tools and techniques used to look for weaknesses and vulnerabilities in a lawful and legitimate manner, along with the tools and techniques to strengthen security of systems. Discusses network mapping, cloud security, scripting, basic IETF protocols and analyze how they work and how they have been exploited.

• Identify the history of information technology hacking and penetration testing
• Identify the ethical standards and laws applicable to penetration testing
• Identify the impact malicious and profit-driven hacks have on information technology and society
• Apply conventional hacking techniques, through a wide variety of technical tools, to identify weaknesses in information systems
• Apply information systems attack methodologies in penetration testing scenarios
• Analyze evidence and report recommendations of systems’ vulnerability and exploitability

CPS 403 Recovery & Forensics

Course Description

Introduces the techniques and skills needed in computer forensics and data recovery. From the use of enterprise computer forensics tools to analyze trace evidence left behind by unauthorized access.

• Explain the history of the digital forensics field
• Explain the need for recognized digital forensics standards and best practices
• Compare and contrast the capabilities and limitations of digital forensics in the cloud environment and mobile devices
• Apply basics techniques involved in digital forensic investigation and e-discovery
• Collect and analyze data using forensic and recovery tactics, techniques, and procedures
• Work with stakeholders to analyze, recommend, and justify forensic solutions while considering various aspects of an organization