Cybersecurity

Students acquire fundamental skills to detect anomalous activity in an organization’s computer systems. Students apply strategies to detect indicators of compromise on both networks and computer systems. Leading intrusion detection tools are employed to implement these strategies.

Students explore how a security operations center (SOC) works with a focus on monitoring and remediation. Students will gain competencies in the use of Security Information and Event Management (SIEM) systems, including features and functionality. Students plan, deploy, configure, and monitor a SIEM system.

Students investigate the discipline of penetration testing. Students conduct reconnaissance, plan, and execute an attack, and exfiltrate data. Various penetration testing tools are employed, along with “Red Team” tactics, techniques, and procedures. Students prepare and present a penetration test report.

Students engage in computer forensics, investigating computer crimes and obtaining evidence. Using examination techniques, malware analysis, and mobile device forensics, students recover and preserve data from storage and mobile devices.

Students employ proactive tactics, techniques, and procedures (TTPs) of active threat hunting for iteratively seeking out advanced persistent cyber threats that have evaded first-line defences. Students detect indicators of compromise by threat actors in order to reduce the mean time to detection and support organizational goals.

Students are presented with current, real-world industry cybersecurity situations. After conducting a thorough threat assessment, students propose a security enhancement solution that complies with company priorities, security policies, ethical standards, and industry regulations.

Students explore specific cybersecurity concerns around cloud computing, including cloud security controls, data governance, federations, and legal issues. Students implement platform agnostic security controls that comply with legal regulations and data governance policies and systems.

Students employ tactics, techniques, and procedures for securing/hardening IT network infrastructure, Windows Server platforms, and Linux Server platforms.

Students apply processes and procedures associated with a security incident response. Students manage a security incident by prioritizing, containing, and mitigating attacks on IT infrastructure. Preparing and delivering a security incident report is an integral requirement of any security incident response.

Building on competencies acquired in “Threat Hunting”, students develop threat intelligence specific to a given organization. Students source, assess, and analyze threat information and synthesize this information into actionable intelligence for their organization. Students prepare and present threat intelligence reports.

Students explore strategic concepts in cybersecurity. Students formulate cybersecurity strategies that contribute to business objectives, correlate cybersecurity and business risks, and provide thought leadership on maintaining currency in cybersecurity capabilities.

Using an assessment and proposed enhancement plan based on a current, real-world industry cybersecurity situation, students implement a cybersecurity enhancement solution that complies with company priorities, security policies, ethical standards, and industry regulations.