Subject Overview

An advanced postgraduate study of cybersecurity strategy, architectures, operations, analytics, governance and emerging threats. The subject integrates technical depth with risk-based decision-making, leadership, ethics and organizational resilience across cloud, enterprise, operational technology and AI-enabled environments.

Learning Goal

Students will be able to critically assess cyber risk, design secure and resilient systems, direct threat detection and incident response, evaluate security technologies, apply governance frameworks, use analytics and AI responsibly, and formulate cybersecurity strategies aligned with organizational and digital-transformation objectives.

Syllabus

1. Advanced Cybersecurity Foundations and Threat Landscape

Learning Objective: Examine security principles, terminology, trust assumptions, attack lifecycles, threat actors, cybercrime ecosystems, nation-state operations and evolving enterprise attack surfaces using contemporary cases.

Category: foundation

2. Cyber Risk Modeling and Decision Analytics

Learning Objective: Apply asset, threat, vulnerability and control analysis; qualitative and quantitative risk methods; FAIR, Bayesian reasoning, Monte Carlo simulation, metrics, KRIs and cost-benefit analysis to security investment decisions.

Category: core

3. Applied Cryptography and Digital Trust

Learning Objective: Evaluate symmetric and asymmetric cryptography, hashing, PKI, key management, digital signatures, secure protocols, secrets management, hardware roots of trust and cryptographic agility, including post-quantum migration.

Category: core

4. Identity Security and Zero Trust

Learning Objective: Design identity and access management using authentication, federation, OAuth/OIDC, SAML, MFA, privileged access management, RBAC/ABAC and machine identities; assess Zero Trust principles and implementation roadmaps.

Category: core

5. Secure Enterprise, Network and Cloud Architecture

Learning Objective: Develop defense-in-depth architectures covering segmentation, secure protocols, SASE, SD-WAN, containers, Kubernetes, serverless systems, multi-cloud controls, shared responsibility, configuration security and continuous posture management.

Category: application

6. Secure Software Engineering and DevSecOps

Learning Objective: Integrate threat modeling, secure design, coding standards, SAST, DAST, software composition analysis, API security, CI/CD controls, infrastructure as code, SBOMs and vulnerability management across the software lifecycle.

Category: application

7. Threat Intelligence and Attack-Surface Management

Learning Objective: Produce actionable intelligence through collection, analysis and dissemination; use MITRE ATT&CK, Cyber Kill Chain, STIX/TAXII, indicators and behavioral intelligence to prioritize exposed assets and anticipate adversaries.

Category: application

8. Security Operations and Detection Engineering

Learning Objective: Design effective SOC capabilities using logging, SIEM, SOAR, EDR/XDR, network telemetry, detection-as-code, behavioral baselines, threat hunting, use-case engineering and performance measures such as detection coverage and response time.

Category: core

9. Incident Response, Digital Forensics and Malware Analysis

Learning Objective: Lead preparation, triage, containment, eradication, recovery and lessons learned; preserve evidence, conduct host, network and cloud forensics, interpret malware behavior and coordinate legal, regulatory and executive communications.

Category: core

10. Offensive Security, Adversary Simulation and Validation

Learning Objective: Critically apply penetration testing, red teaming, social-engineering assessment, purple teaming, attack-path analysis and breach-and-attack simulation within legal and ethical boundaries to validate defensive effectiveness.

Category: advanced

11. AI, Machine Learning and Cybersecurity Analytics

Learning Objective: Use statistical and machine-learning methods for anomaly, fraud and threat detection; evaluate model performance and explainability; address adversarial ML, data poisoning, model theft, deepfakes and security risks in generative-AI systems.

Category: contemporary

12. IoT, OT and Cyber-Physical Systems Security

Learning Objective: Assess IoT, industrial control systems, critical infrastructure and cyber-physical risks; apply Purdue, IEC 62443 and safety-aware security concepts while balancing availability, legacy technology and operational constraints.

Category: advanced

13. Governance, Privacy, Law and Cybersecurity Ethics

Learning Objective: Apply NIST CSF, ISO/IEC 27001, COBIT and regulatory requirements; design policies, assurance and audit mechanisms; address privacy engineering, data sovereignty, responsible disclosure, surveillance ethics and board accountability.

Category: strategic

14. Cyber Resilience, Supply-Chain Risk and Crisis Leadership

Learning Objective: Plan business continuity, disaster recovery, ransomware response and cyber-crisis exercises; manage third-party and software supply-chain risk, resilience metrics, cyber insurance and executive stakeholder communication.

Category: strategic

15. Cybersecurity Strategy and Future Developments

Learning Objective: Formulate security strategies aligned with business and digital transformation; evaluate capability maturity, workforce, budgets and operating models while assessing quantum threats, autonomous attacks, confidential computing, decentralized technologies and regulatory change.

Category: contemporary