Security Operations, Compliance, and Recovery

This unit focuses on operational cybersecurity practices that sustain business continuity, enforce compliance, and enable effective incident recovery. Students will learn risk management, backup and restoration strategies, operational controls (including KMS, patching, and device management), and methods for reporting, measuring behavior, and responding to social engineering and privacy challenges.

Learning Objectives

• Analyze threat vectors, social engineering techniques, and non-malicious risks to prioritize vulnerabilities and produce a documented risk management plan
• Apply backup and recovery methods — including full, incremental, and cryptocurrency-specific backups — to restore systems and credentials in simulated incident scenarios within defined recovery objectives
• Evaluate and implement operational security controls (device management, key management services, patch management, physical security, and DevSecOps/DataOps practices) to reduce identified risks and maintain system integrity
• Demonstrate compliance and reporting skills by mapping applicable regulations, producing compliance documentation and meaningful security reports, and measuring behavioral change from training or gamification interventions