Foundations of Cybersecurity Risk Management

This unit introduces core cybersecurity concepts: common threats and attack types, sources of vulnerability (physical, device, network, human), basic authentication and backup practices, and the roles and ethics involved in responding to incidents. Students will learn to assess and prioritize risks, apply practical protections for personal and organizational assets, and perform initial containment and recovery actions that prepare them for deeper technical and defensive work in subsequent units.

Learning Objectives

• Analyze common cyber threats and attack vectors (physical, social engineering, malware, network, and advanced attacks) and determine their potential impacts on individuals and organizations
• Evaluate personal and organizational vulnerabilities—including passwords, device and account security, IoT, and employee behaviors—and prioritize mitigation strategies to reduce risk
• Apply practical security controls by implementing strong authentication practices, securing devices and external accounts, and performing backup, restore, and reset procedures appropriately
• Demonstrate initial incident-response actions by identifying overt and covert breaches, executing containment and preservation steps, and explaining professional roles and ethical considerations for escalation