Learning Objectives

• Equip students with the knowledge and skills to adapt, implement, and operate a cybersecurity program that incorporates NIST 800-53 and integrates with existing organizational capabilities

Course Outline

Module 1: Course Introduction

Introduces course organization and establishes the foundational context for the program.

Module 2: Managing Risks in the Digital Age

Covers the Enterprise Risk Management Framework, provides an overview of COSO, and examines how the Enterprise Risk Management Framework is applied in practice.

Module 3: Cybersecurity within a System

Addresses systems thinking, governance and culture, strategy and objectives, the Service Value Management System, and an introduction to the Z-X Model.

Module 4: Z-X Model Capabilities

Describes the four capability areas of the Z-X Model: Plan, Design, Build and Deploy, and Operate and Improve.

Module 5: Adapt

Introduces the AIO approach and covers cybersecurity adoption and adaptation, the Adapt phase within the Z-X Model, implementation preparation, a project approach using Goal-Question-Metric (GQM), and metrics, measurement, and balance.

Module 6: Implement

Explains the relationship between the Implement phase and COSO Principles, and walks through each implementation phase: Phase 0, Phase 1, Phase 2, Phase 3, and Additional Controls.

Module 7: Operate and Improve

Explores the connection between the Operate and Improve phases and COSO Principles, addresses delivering and integrating value, and reviews approaches to ongoing improvement.