Language of instruction: |
English |
Type of course: |
Non-Departmental Elective |
Course Level: |
Bachelor’s Degree (First Cycle)
|
Mode of Delivery: |
Face to face
|
Course Coordinator : |
MEHMET ŞÜKRÜ KURAN |
Course Lecturer(s): |
Dr. Öğr. Üyesi CEMAL OKAN ŞAKAR
|
Course Objectives: |
As our lives increasingly depend on digital services, the need to protect our information from being maliciously disrupted or misused is really important. Threats to information security are global, persistent, and increasingly sophisticated. As the number of mobile users, digital applications and data networks increase, so do the opportunities for exploitation. Effective information security at the enterprise level requires participation, planning, and practice. It is an ongoing effort that requires management and staff to work together. The Cybersecurity and Information Systems Security Course will provide learners with principles of data and technology that frame and define cybersecurity along with the knowledge and skills to design a secure network infrastructure. Learners will gain insight into the importance of cybersecurity and the integral role of cybersecurity professionals. Topics include assembling the design team, modeling threats, and analyzing security risks in order to meet business requirements for securing computers in a networked environment. The course encourages decision-making skills through real-life scenarios that the target audience may encounter. You are given the task of collecting the information and sorting through the details to resolve the given security requirement. These topics also include plans and policies, enterprise roles, security metrics, risk management, standards and regulations, physical security, and business continuity.
|
Week |
Subject |
Related Preparation |
1) |
"The Security Environment
• Threats, vulnerabilities, and consequences
• Advanced persistent threats
• The state of security today
• Why security matters
Principles of Cybersecurity
• The interrelated components of the computing environment
"
|
|
2) |
"Principles of Cybersecurity (cont.)
• Cybersecurity models (the CIA triad, the star model, the Parkerian hexad)
• Computer security, information security, and information assurance
Cybersecurity Management Concepts & Access Control
• Security governance
• Management models, roles, and functions
"
|
|
3) |
"Enterprise Roles and Structures & Security Operations and Administration
• Information security roles and positions
• Alternative enterprise structures and interfaces
"
|
|
4) |
"Strategy and Strategic Planning
• Strategy
• Risk Identification, Monitoring and Analysis
• Strategic planning and security strategy
• The information security lifecycle
• Architecting the enterprise
"
|
|
5) |
Security Plans and Policies
• Levels of planning
• Incident Response and Recovery
• Planning misalignment
• The System Security Plan (SSP)
• Policy development and implementation
Laws and Regulatory Requirements
|
|
6) |
Security Standards and Controls
• Security standards and controls
Certification and accreditation (C&A)
|
|
7) |
Risk Management
• Principles of risk
• Types of risk
• Risk strategies
The Risk Management Framework (RMF)
|
|
8) |
Security Metrics and Key Performance Indicators (KPIs)
• The challenge of security metrics
• What makes a good metric?
• Approaches to security metrics
Metrics and FISMA
|
|
9) |
Physical Security and Environmental Events
• Physical and environmental threats
• Physical and environmental controls
|
|
10) |
Contingency Planning
• Developing a contingency plan
• Understanding the different types of contingency plan
Responding to events
|
|
11) |
Security Education, Training, and Awareness
• Human factors in security
• Developing and implementing a security training plan
Cross-domain training (IT and other security domains)
|
|
12) |
"Managing information security
• The purpose of certification and accreditation
• Trends in certification and accreditation
• Cryptography
"
|
|
13) |
"Incident Response
• Incident categories
• Incident response
Incident recovery
The future of cybersecurity
• Key future uncertainties
• Possible future scenarios
How to apply what you’ve learned"
|
|
14) |
General Review
|
|
|
Program Outcomes |
Level of Contribution |
1) |
To have a grasp of basic mathematics, applied mathematics and theories and applications in Mathematics |
|
2) |
To be able to understand and assess mathematical proofs and construct appropriate proofs of their own and also define and analyze problems and to find solutions based on scientific methods, |
|
3) |
To be able to apply mathematics in real life with interdisciplinary approach and to discover their potentials, |
|
4) |
To be able to acquire necessary information and to make modeling in any field that mathematics is used and to improve herself/himself, |
4 |
5) |
To be able to tell theoretical and technical information easily to both experts in detail and non-experts in basic and comprehensible way, |
|
6) |
To be familiar with computer programs used in the fields of mathematics and to be able to use at least one of them effectively at the European Computer Driving Licence Advanced Level,
|
|
7) |
To be able to behave in accordance with social, scientific and ethical values in each step of the projects involved and to be able to introduce and apply projects in terms of civic engagement, |
|
8) |
To be able to evaluate all processes effectively and to have enough awareness about quality management by being conscious and having intellectual background in the universal sense, |
4 |
9) |
By having a way of abstract thinking, to be able to connect concrete events and to transfer solutions, to be able to design experiments, collect data, and analyze results by scientific methods and to interfere, |
|
10) |
To be able to continue lifelong learning by renewing the knowledge, the abilities and the competencies which have been developed during the program, and being conscious about lifelong learning, |
|
11) |
To be able to adapt and transfer the knowledge gained in the areas of mathematics ; such as algebra, analysis, number theory, mathematical logic, geometry and topology to the level of secondary school, |
|
12) |
To be able to conduct a research either as an individual or as a team member, and to be effective in each related step of the project, to take role in the decision process, to plan and manage the project by using time effectively. |
|