CS 671 - Incident Response and Cyber Security Management

Prerequisites
CS 662

Students in this course learn key aspects of Cybersecurity Incident Response Management (CIRM). Effective CIRM begins with effective Planning - including plans for Incident Response, Disaster Recovery, and Business Continuity. Students in this course will learn from case studies of past cyber incidents. Key skills developed in this course include the developing of an Incident Response Plan, ethical and best practices on handling public/private communications and disclosures after an incident, incident investigation techniques (forensics) and interfacing with law enforcement, and post-incident recovery. Students in this course will learn how to plan for, respond to, investigate, and report on Cybersecurity Incidents. Before an incident happens, effective Cybersecurity Leadership requires that there is a cogent Governance structure. Students in this course will learn how to manage Cybersecurity processes while meeting the needs of the Enterprise. Students will learn how to establish a Governance program, Cybersecurity management frameworks, how to develop and implement a Cybersecurity strategy, how to develop and deploy Cybersecurity Policy and controls such that there is standards and regulatory compliance, techniques for advocating for the right organizational supports for Cybersecurity Leadership (ex: budgeting and training), how to effectively communicate with Executives and the Board, and how to acquire and develop talent for maintaining Cyber-resilience.

Course credits: 3