Cybersecurity Risk Management

Cybersecurity Risk Management

1. Week 1 - Foundations

   • CIA Triad
     • Confidentiality
     • Integrity
     • Availability
     • Assignment 2
       • CIA Triad Security for Autonomous Vehicles
   • Threat Modeling Process
     • Cyber Kill Chain
       • Assignment 1
     • Likelihood of Attack
     • Threat & Attack Path
     • Attacker Profiles
   • Risk Management
     • Lines of Defense
     • Risk
       • Identification
       • Assessment
       • Response
     • Assignment 1
       • Favourite Cybersecurity Scenario

2. Week 2 - Risk Analysis

   • Attack Trees
     • OR and AND Gates
     • Attack-Defense Trees (ADTrees)
     • Countermeasures
     • Assignment 1
   • Fault Trees
     • Security and Safety Dependencies
     • Quantitative Analysis
       • Optimization
       • Evaluation
   • Risk Components
     • Safety
       • Unintended
       • Failure
       • human error
       • accidents
     • Security
       • Intended
       • malicious attacks
       • Intrusions
       • Vulnerability

3. Week 3 - Social Engineering

   • Social Engineering
     • Persuasion
       • Persuasion Techniques
         • Authority
         • Reciprocity
         • Scarcity
     • Cognitive Processing
     • Goal Hierarchy & Victimization Rate
     • Prevention Strategies
       • Authority Intervention
       • Countermeasures
     • Deception Detection
   • Quantitative Security Models
     • Logistic Regression Analysis
     • Bayesian Belief Networks
   • Social Engineering Experiment
     • Data Integration

4. Last-Mile Delivery Robots

   • Cyber-Physical Systems
     • Autonomous Robots
     • Cyber/Physical Attacks
   • Security and Safety Co-Engineering
     • Trade-Off
       • Security
       • Delivery Guarantee
     • Component-Level Analysis
     • CIA Triad Security for Autonomous Vehicles
       • Possible Safety/Security Problems for Last-Mile Robots
   • Safety vs. Security
     • Human Safety
     • Data Integrity
   • Assignment 2

5. Week 6

   • Risk Management Frameworks
     • Risk IT Framework (ISACA)
       • Risk Appetite
       • Tolerance
       • Key Risk Indicators (KRIs)
   • Cybersecurity Operations
     • Operations for Cyber Threats
     • Attack Detection and Defense
       • Real-time Risk Assessment
       • Business Impact Assessment
       • Emerging Risks
         • Cyber Catastrophes
         • Natural Disasters