Security Management and Governance

本课程是 Cyber Security – Technology and Governance 专项课程的一部分

位教师：Andrew Dwyer

访问权限由 New York State Department of Labor 提供

2,849 人已注册

4个模块

深入了解一个主题并学习基础知识。

38 条评论

初级等级

无需具备相关经验

2 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

4个模块

深入了解一个主题并学习基础知识。

38 条评论

初级等级

无需具备相关经验

2 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

您将获得的技能

要了解的详细信息

可分享的证书

添加到您的领英档案

作业

4 任务¹

AI 评分请参见免责声明

授课语言：英语（English）

了解顶级公司的员工如何掌握热门技能

了解关于 Coursera for Business 的更多信息

Petrobras, TATA, Danone, Capgemini, P&G 和 L'Oreal 的徽标

积累特定领域的专业知识

本课程是 Cyber Security – Technology and Governance 专项课程专项课程的一部分

在注册此课程时，您还会同时注册此专项课程。

向行业专家学习新概念
获得对主题或工具的基础理解
通过实践项目培养工作相关技能
获得可共享的职业证书

该课程共有4个模块

In this course you will look at some of the key components of practical cyber security management and its governance. This includes what happens when things go wrong, understanding how organisations can respond to incidents, through to the essential role of people in achieving better cyber security outcomes. Together, you will examine how incident management, cyber resilience, and developing an effective appreciation of people, not simply as users but as active participants, can enable better cyber security outcomes.

The topics covered include: • Identifying what an incident is • Incident preparation, planning, and response • Cyber resilience • The role of people in security management • The building of trust and developing positive cyber security cultures By completing this course, you will learn how to integrate incident management and a rich knowledge of people into a real-world Information Security Management System for an organisation.

In the first week, we will obtain an overview of the course and, in particular, get an overview how security management can be used to address and respond to security incidents through a range of techniques. This includes engaging with ISO/IEC 27035 to develop a pragmatic response to risk management.

涵盖的内容

7个视频7篇阅读材料1个作业2个讨论话题

7个视频总计63分钟

Introduction to Security Management and Governance 10分钟
Introduction to incident management and response 5分钟
When things go wrong 11分钟
Incident management 13分钟
Planning for failure 9分钟
Developing resilience 9分钟
Week 1 summary 4分钟

7篇阅读材料总计220分钟

Course syllabus 10分钟
Starting your studies 20分钟
Study journal reflection – expectations 40分钟
Principles of good peer feedback in peer review assignment 10分钟
Incident response 20分钟
US National Institute of Standards and Technology’s (NIST) 800-61 60分钟
Incident management planning 60分钟

1个作业总计15分钟

End of week 1 quiz 15分钟

2个讨论话题总计60分钟

Getting to know each other 30分钟
The standard processes of incident planning 30分钟

This week you will learn how to identify and prioritise incidents, their planning and preparation, responding to incidents as well as learning and assessing from (inevitable) incidents that organisations encounter.

涵盖的内容

7个视频3篇阅读材料1个作业1个讨论话题

7个视频总计57分钟

Week 2 introduction 5分钟
Identifying an incident 10分钟
Incident response teams 13分钟
Incident response actions 6分钟
Reporting incidents 8分钟
How to learn lessons from incidents 9分钟
Week 2 summary 5分钟

3篇阅读材料总计180分钟

Activity: Information sharing partnerships 60分钟
Security incident management 60分钟
Lessons learned from an information security incident 60分钟

1个作业总计15分钟

End of week 2 Quiz 15分钟

1个讨论话题总计30分钟

Digital forensics 30分钟

This week is concerned about the integration of different people and communities into security management.

涵盖的内容

7个视频2篇阅读材料1个作业2个讨论话题

7个视频总计48分钟

Introduction to People and Cyber Security 6分钟
Surely, we know who people are? 9分钟
Who and what are we seeking to secure? 8分钟
Developing Management Strategies for People 7分钟
Vetting and Contracting 6分钟
Developing awareness and ‘Good’ practice 7分钟
Week 3 summary 4分钟

2篇阅读材料总计120分钟

Walking the line: The everyday security ties that bind 60分钟
Procedural and people security controls 60分钟

1个作业总计15分钟

End of week 3 Quiz 15分钟

2个讨论话题总计60分钟

The concept of positive and negative security 30分钟
People management security controls 30分钟

In this week you will learn about a range of components ranging from trust to security awareness training to demonstrate why the management of people is a core element to a successful information security management system. The week concludes by asking what people-centric security might enable for an organisation and how such a change of perspective can be beneficial to security management.